@@ -248,17 +248,17 @@ The Flags field in the fixed Base Header is defined as follows:
248248#+caption: Base Header Flags
249249#+name: flags
250250#+begin_src
251- 0 1 2
251+ 0 1 2
252252 +-+-+-+
253- |F| R |
253+ |F|R R |
254254 +-+-+-+
255255#+end_src
256256
257257- Packet Format (F) :: 1 bit: Set to zero for full EESP packet Format (i.e., the EESP header includes the
258258 ~Payload Info Header~), set to 1 for Optimized EESP Packet format. This bit
259259 MAY be only set to 1 if the Crypt Offset is positive. It MUST be set to
260260 0 otherwise.
261- - Reserved (R ) :: 2 bits: Reserved for future versions, MUST be set to 0 ,
261+ - Reserved (RR ) :: 2 bits: Reserved for future versions, MUST be set to 00 ,
262262 and ignored by the receiver.
263263
264264
@@ -335,7 +335,7 @@ in the following sections.
335335
336336*** Sequence Number
337337
338- The sequence number field is used for relay protection.
338+ The sequence number field is used for replay protection.
339339This unsigned 64-bit field contains a counter value that increases
340340for each packet sent, i.e., a per-SA packet sequence number. For a
341341unicast SA or a single-sender multicast SA, the sender MUST increment
@@ -412,9 +412,10 @@ cryptographic synchronization data, e.g., an Initialization Vector
412412(IV), usually is not encrypted per se (see Table 1), although it
413413sometimes is referred to as being part of the ciphertext.)
414414
415- Counter mode algorithms MAY encode the 64-bit counter of the
416- Initialization Vector (IV) on the Sequence number Field. This option
417- saves 8 header bytes on each packet. Whether or not this option is
415+ Counter mode algorithms MAY use the 64-bit counter as the
416+ Initialization Vector (IV) in the Sequence number Field, as specified
417+ [[RFC8750]]. This option, Implicit Initialization Vector (IIV)
418+ saves 8 header bytes on each packet. Whether or not this option is
418419selected is determined as part of Security Association (SA)
419420establishment.
420421
0 commit comments