Subject: [Ipsec] IKEv1 Security Considerations

From: Russ Housley <[email-masked]>
Date: Wed, 29 Mar 2006 19:35:34 -0500

RFC 2409 says:

    Repeated re-keying using Quick Mode can consume the entropy of the
    Diffie-Hellman shared secret. Implementors should take note of this
    fact and set a limit on Quick Mode Exchanges between exponentiations.
    This memo does not prescribe such a limit.

What limit do implementors impose?

Russ

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec