Subject: KARP analysis of BFD

From: Jeffrey Haas <[email-masked]>
Date: Wed, 8 May 2013 13:18:24 -0400

For those of you who aren't following KARP:

http://tools.ietf.org/html/draft-ietf-karp-bfd-analysis-00

I believe the primary fallout from the analysis is roughly this:
* draft-ietf-bfd-generic-crypto-auth (already a WG document) covers the
  increased sequence number key space.  
* draft-ietf-bfd-hmac-sha (already a WG document) covers the ciphers.

Procedurally, some additional randomization of discriminator values is
recommended as well.  The BFD base specification already recommends that it
be set to a random value for increased security.  (I.e. check your
implementations.)

Echo mode security considerations are already outside the scope of the BFD
protocol.  If you use it, consider your security.

-- Jeff