Subject: [IPsec] Re: About PFS for first CHILD_SA

From: Michael Richardson <[email-masked]>
Date: Thu, 15 Nov 2007 10:10:58 -0500

[email-masked] wrote:
> Anil,
> 
>> I would like to know how PFS is achieved for first CHILD_SA that is
>> created as part of piggyback in AUTH exchange.
> 
> PFS against what?  The IKE SA and the first child SA are created at
> essentially the same time.  There isn't anything previous against
> which to provide forward secrecy.  

   Yes, it is a bit more efficient in IKEv2.
   In IKEv1, if PFS is enabled, then a new DH is done, even for the first 
"phase 2" SA.

_______________________________________________
IPsec mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ipsec