Subject: 05 draft status?

From: Nobuo OKABE <[email-masked]>
Date: Wed, 17 Sep 2003 15:52:50 +0900 (JST)

I would like to know the status of KINK 05 draft.

    Will be the draft revised ?

    If so, what part need to be improved?

    Is there any issue list (or so on) pointed out by IESG?

    Please let me know if any of you have known related pointers.

Here are my comment about 05 draft.

# Sorry for my big delay.
# I suspended my comment because
# I guessed that 06 draft would be issued later.

    COMMENT1

        about "6.8 KE Payload" or so.

        There are two cases to break two-way handshake
        for establishing SA.
        1) A responder does not choose the first proposal.
        2) A initiator sends CREATE with KE payload.
        The former case is described in the draft,
        but the latter is not.

        It seems good for readers to describe the latter case
        explicitly in section 6.8 or so.

    COMMENT2

        about "7.3 CREATE"

        Missing KE payload in the REPLY from.

        REPLY KINK Header
          KINK_AP_REP
          [KINK_ENCRYPT]
            KINK_ISAKMP
                 SA Payload[s]
                        Proposal Payload
                                Transform Payload
                 [ Nonce Payload (Nr)]
                 [KE]    <========================== this
                 [IDci, IDcr]
                 [Notification Payloads]

    COMMENT3

        about "8. Key Derivation"

        The draft does not define "prf".
        In IKE's case, a phase 1 negotiates a hash algorithm
        that is used for prf. But KINK does not use IKE phase 1.
        I guess that the hash algorithm specified in the Kerberos ticket
        is used.

thanks,

----- nobuo