Subject: [MSEC] Responder-initiated TGK re-keying/CSB updating allowed in MIKEY?

From: Euchner Martin <[email-masked]>
Date: Tue, 12 Aug 2003 11:38:52 +0200

Dear experts,

MIKEY-07 describes means how the initiator can update the CSB or re-key the TGK (see section 4.5).

Questions are: What about responder-initiated key update etc where the responder requests key update actions from the initiator? Is this possible using MIKEY?

Is that something that can be done with some non-MIKEY (request) message from the responder to the initiator? I believe yes, but 1) it's non-standard and 2) yields a 2- or 3-way handshake.

Is some role change during an active CSB allowed where the responder takes over the initiator role for the purpose of key updating? Would that really work?
My understanding is, that the initiator or responder roles are static throughout the lifetime of the protocol instantiation. The definition in 1.3 is not entirely precise about that, but I infer this more from statements like "...This is done by executing the transport/exchange phase once again to obtain a new TGK (....".

With kind regards

Martin Euchner.
-----------------------------------------------------------------------
| Dipl.-Inf.                     Rapporteur Q.G/SG16
| Martin Euchner                 Phone: +49 89 722 55790
| Siemens AG.....................Fax  : +49 89 722 62366
| ICN M SR 3                     mailto:[email-masked]
|                                mailto:[email-masked]
| Hofmannstr. 51                 Intranet: http://ietf.icn.siemens.de/sr3/Standardisation_Topics/security/
| D-81359 Muenchen               Internet: http://www.siemens.de/
| __________________
| Germany     
-----------------------------------------------------------------------

_______________________________________________
msec mailing list
[email-masked]
http://www.pairlist.net/mailman/listinfo/msec