Subject: Re: [Ipsec] Implementaton of AES-XCBC-MAC-96

From: aforaslam <[email-masked]>
Date: Wed, 11 Jul 2007 16:34:58 -0700 (PDT)

Pooja Kamra wrote:
> 
> Hi,
>  
> In the RFC 3566, while generating K1, K2, and K3 from secret key K, what
> is the IV to be used. In the test vectors given in the RFC, IV is not
> specified. So, for generating three keys, do we have to use AES encryption
> in ECB mode, that doesn't need IV, or we have to use 
> "E[0] = 0x00000000000000000000000000000000" as the IV.
>  
> Is there any sample implementation of the same available.
>  
> Regards
> Pooja
> _______________________________________________
> Ipsec mailing list
> [email-masked]
> https://www1.ietf.org/mailman/listinfo/ipsec
> 
> 

Hello,

         So at any point we don't have to use IV (or AES CBC), right?
I mean what about other steps (apart from initializing K1, k2, k3), do
we still use AES in ECB mode?

         Also, for IPSEC packets don't we have to send the IV value along
with the payload? (If AES with CBC mode is used here). Additionally, if
this is true, then waht about IKE packets, where do we place the IV in
the process?

Thanks,
Aslam

-- 
View this message in context: http://www.nabble.com/Implementaton-of-AES-XCBC-MAC-96-tf2330876.html#a11550802
Sent from the IETF - Ipsec mailing list archive at Nabble.com.

_______________________________________________
Ipsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec