Subject: Re: [IPsec] Bug: Section 2.15 - Responder Signed Octets

From: Paul Hoffman <[email-masked]>
Date: Thu, 3 Apr 2008 20:29:04 -0700

I'm cleaning up some IKEv2bis issues, and noticed this one had not 
been replied to. Does everyone agree that this change is correct?

--Paul Hoffman

At 2:17 PM -0800 3/6/08, Jeffrey Sun wrote:
>Current:
>
>The responder's signed octets can be described as:
>
>    ResponderSignedOctets = RealMessage2 | NonceIData | MACedIDForR
>    GenIKEHDR = [ four octets 0 if using port 4500 ] | RealIKEHDR
>    RealIKEHDR =  SPIi | SPIr |  . . . | Length
>    RealMessage2 = RealIKEHDR | RestOfMessage2
>    NonceIPayload = PayloadHeader | NonceIData
>    ResponderIDPayload = PayloadHeader | RestOfIDPayload
>    RestOfRespIDPayload = IDType | RESERVED | InitIDData
>    MACedIDForR = prf(SK_pr, RestOfRespIDPayload)
>
>
>
>Suggested:
>
>The responder's signed octets can be described as:
>
>    ResponderSignedOctets = RealMessage2 | NonceIData | MACedIDForR
>    GenIKEHDR = [ four octets 0 if using port 4500 ] | RealIKEHDR
>    RealIKEHDR =  SPIi | SPIr |  . . . | Length
>    RealMessage2 = RealIKEHDR | RestOfMessage2
>    NonceIPayload = PayloadHeader | NonceIData
>    ResponderIDPayload = PayloadHeader | RestOfIDPayload
>    RestOfRespIDPayload = IDType | RESERVED | RespIDData
>    MACedIDForR = prf(SK_pr, RestOfRespIDPayload)
>
>
>Comment:
>Changed "InitIDData" to "RespIDData". Unless I'm mistaken that "Init"
>stands for "Initiator", it should be "RespIDData". It's really a minor
>issue since RestofRespIDPayload infers the IDr Payload (and the
>Responder's Identification Data).
>
>
>- Jeff Sun
>_______________________________________________
>IPsec mailing list
>[email-masked]
>https://www.ietf.org/mailman/listinfo/ipsec

_______________________________________________
IPsec mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/ipsec

---

From: <[email-masked]>
Date: Fri, 4 Apr 2008 14:21:50 +0300

Looks correct to me.

Best regards,
Pasi 

> -----Original Message-----
> From: [email-masked] [mailto:[email-masked]] 
> On Behalf Of ext Paul Hoffman
> Sent: 04 April, 2008 06:29
> To: Jeffrey Sun
> Cc: IPsec WG
> Subject: Re: [IPsec] Bug: Section 2.15 - Responder Signed Octets
>