Subject: [Cfrg] Please review: additional Diffie Hellman tests for IKEv2

From: Yaron Sheffer <[email-masked]>
Date: Mon, 04 Mar 2013 22:35:47 +0200

Hi,

Scott Fluhrer came up with a set of tests that an IKEv2 peer receiving a 
public DH key needs to perform, so that its private DH key is not 
endangered, even if it is being reused with multiple peers (a.k.a. 
unsafe sex :-). The tests apply primarily to ECC groups.

This is now an ipsecme draft, 
http://tools.ietf.org/html/draft-ietf-ipsecme-dh-checks-00. We would 
appreciate further comments from this list.

Thanks,
     Yaron