Skip to content

Commit 24de3ce

Browse files
committed
Merge commit 'e83f23a' closes #2
2 parents e9edd32 + e83f23a commit 24de3ce

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

eesp-ikev2.org

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -172,7 +172,7 @@ the original EESP SA.
172172
| | +-- Attribute ( Key Length = 128 )
173173
| +-- Transform INTEG ( Name = AUTH_HMAC_SHA1_96 )
174174
| +-- Transform INTEG ( Name = AUTH_AES_XCBC_96 )
175-
| +-- Transform SN ( Name = Full 64 bit Sequence Number)
175+
| +-- Transform SN ( Name = 64-bit Sequential Numbers )
176176
| +-- Transform EESPV ( Name = V1 )
177177
| +-- Transform EESPSUBSA ( Name = )
178178
| +-- Transform EESPSSID ( Name = )
@@ -181,15 +181,15 @@ the original EESP SA.
181181

182182
** Replay Protection Service
183183
EESP provides an optional Replay service using
184-
Full 64 bit Sequence Numbers(TBD9), carried in the packet.
184+
64-bit sequence numbers carried in the packet.
185185
To enable Replay service the initiator SHOULD
186186
propose Sequence Numbers Transforms,
187-
SN = (Full 64 bit Sequence Number(TBD9)) in Substructure of the
187+
SN = (64-bit Sequential Numbers) in the
188188
Proposal Substructure inside the Security Association (SA) payload
189-
in the IKEv2 Exchange. When the responder select Full 64 bit SN a
190-
receiver MUST enable Reply Protection.
189+
in the IKEv2 Exchange. When the responder selects 64-bit Sequential Numbers, a
190+
both sides MUST enable Reply Protection.
191191

192-
# NOTE STK: I'd say MUST above as we want to negotiate Anti-Replayservice
192+
# NOTE STK: I'd say MUST above as we want to negotiate Anti-Replay service
193193
# and not just the presense of the seq nr field.
194194

195195
To disable sequence numbering, and thus replay protection based on
@@ -216,8 +216,8 @@ as specified in [[RFC8750]], the IV MUST be omitted in the EESP
216216
packet. To enable this functionality, IIV transforms defined in
217217
[[IKEv2-Enc]] MUST be used during negotiation. Furthermore,
218218
the [[IKEv2-SN]] extension MUST be negotiated to support the use of
219-
a Full 64-bit Sequence Numbers in EESP packets. If the the proposal
220-
does not include Full 64-bit Sequence Numbers return error
219+
64-bit Sequential Numbers in EESP packets. If the the proposal
220+
does not include 64-bit Sequential Numbers return error
221221
NO_PROPOSAL_CHOSEN.
222222

223223
** EESP Version
@@ -490,8 +490,8 @@ This document defines a new value in the IKEv2 "Transform Type 5 - Sequence
490490

491491
| Value | Name | Reference |
492492
|---------+-------------------------------+-----------------+
493-
| [TBD9] | Full 64-bit Sequence Numbers | [this document] |
494-
| [TBD10] | Full 64-bit Sequence Numbers | [this document] |
493+
| [TBD9] | 64-bit Sequential Numbers | [this document] |
494+
| [TBD10] | None | [this document] |
495495

496496
** New Registries
497497

0 commit comments

Comments
 (0)