@@ -172,7 +172,7 @@ the original EESP SA.
172172 | | +-- Attribute ( Key Length = 128 )
173173 | +-- Transform INTEG ( Name = AUTH_HMAC_SHA1_96 )
174174 | +-- Transform INTEG ( Name = AUTH_AES_XCBC_96 )
175- | +-- Transform SN ( Name = Full 64 bit Sequence Number )
175+ | +-- Transform SN ( Name = 64- bit Sequential Numbers )
176176 | +-- Transform EESPV ( Name = V1 )
177177 | +-- Transform EESPSUBSA ( Name = )
178178 | +-- Transform EESPSSID ( Name = )
@@ -181,15 +181,15 @@ the original EESP SA.
181181
182182** Replay Protection Service
183183EESP provides an optional Replay service using
184- Full 64 bit Sequence Numbers(TBD9), carried in the packet.
184+ 64- bit sequence numbers carried in the packet.
185185To enable Replay service the initiator SHOULD
186186propose Sequence Numbers Transforms,
187- SN = (Full 64 bit Sequence Number(TBD9)) in Substructure of the
187+ SN = (64- bit Sequential Numbers) in the
188188Proposal Substructure inside the Security Association (SA) payload
189- in the IKEv2 Exchange. When the responder select Full 64 bit SN a
190- receiver MUST enable Reply Protection.
189+ in the IKEv2 Exchange. When the responder selects 64- bit Sequential Numbers, a
190+ both sides MUST enable Reply Protection.
191191
192- # NOTE STK: I'd say MUST above as we want to negotiate Anti-Replayservice
192+ # NOTE STK: I'd say MUST above as we want to negotiate Anti-Replay service
193193# and not just the presense of the seq nr field.
194194
195195To disable sequence numbering, and thus replay protection based on
@@ -216,8 +216,8 @@ as specified in [[RFC8750]], the IV MUST be omitted in the EESP
216216packet. To enable this functionality, IIV transforms defined in
217217[[IKEv2-Enc]] MUST be used during negotiation. Furthermore,
218218the [[IKEv2-SN]] extension MUST be negotiated to support the use of
219- a Full 64-bit Sequence Numbers in EESP packets. If the the proposal
220- does not include Full 64-bit Sequence Numbers return error
219+ 64-bit Sequential Numbers in EESP packets. If the the proposal
220+ does not include 64-bit Sequential Numbers return error
221221NO_PROPOSAL_CHOSEN.
222222
223223** EESP Version
@@ -490,8 +490,8 @@ This document defines a new value in the IKEv2 "Transform Type 5 - Sequence
490490
491491| Value | Name | Reference |
492492|---------+-------------------------------+-----------------+
493- | [TBD9] | Full 64-bit Sequence Numbers | [this document] |
494- | [TBD10] | Full 64-bit Sequence Numbers | [this document] |
493+ | [TBD9] | 64-bit Sequential Numbers | [this document] |
494+ | [TBD10] | None | [this document] |
495495
496496** New Registries
497497
0 commit comments