Subject: [core] stateless: pull request #11

From: Michael Richardson <[email-masked]>
Date: Wed, 30 Sep 2020 12:29:44 -0400

I think that the reference to RFC4107(BCP107) is in error in my opinion.
That document deals with systems like IKEv2/TLS/etc.
The key in question never needs to leave the device.

The key needs to be rotated, but there is really no need for more than a
random number generated.  The concern about the nonce-reuse is real.
A sleep node that can not maintain a counter to make sure nonces are not
reused could generate a new key during each wake cycle, if the responses are
not expected to span sleep cycles.
(Did the term "drowsy" get into some terminology document? I recall a discussion)

https://github.com/core-wg/stateless/pull/11

--
Michael Richardson <[email-masked]>   . o O ( IPv6 IøT consulting )
           Sandelman Software Works Inc, Ottawa and Worldwide