Subject: Re: [MSEC] GSAKMP issue 09: Rekey "Sequence ID" rollover semantics

From: Uri Meth <[email-masked]>
Date: Thu, 25 Sep 2003 15:24:22 -0400

We agree that we need to mitigate this problem.  We will investigate
appropriate methods and disperse solution(s) to authors group for
concensus.

Stay tuned.

UM

On Fri, Aug 08, 2003 at 03:32:31PM -0400, George Gross wrote:
> 
> GSAKMP issue 09
> 
> Section and relevant text passage:
> 
> 6.1 GSAKMP Header, Sequence ID text:
> 
>  "GCKS/SGCKS MUST also garantee that this value does not
>     suffer from rollover problems..."
> 
> Comment/issue description:
> 
> s/garantee/guarantee/
> 
> Granted, this is a corner case, but the text does seem vague here.  If the GCKS had
> the misfortune to generate an initial random Sequence ID that was close to 2^32
> AND then the group was long-lived AND it had lots of rekey events, then one
> might have to deal with this. So what do you do?
> 
> Suggested issue resolution:
> 
> The text should specify that rollover is allowed, and indicate an algorithm
> in an appendix that would gracefully accept wrap around.
> 
> 
> _______________________________________________
> msec mailing list
> [email-masked]
> http://www.pairlist.net/mailman/listinfo/msec

-- 
Uri Meth                            (410) 872 - 1515 x233 (voice)
SPARTA, Inc.                        (410) 872 - 8079      (fax)
7075 Samuel Morse Drive             [email-masked]
Columbia, MD 21046

_______________________________________________
msec mailing list
[email-masked]
http://www.pairlist.net/mailman/listinfo/msec