Subject: [mobile-ip] Interoperability for the Auth Suboption

From: Vijay Devarapalli <[email-masked]>
Date: Wed, 28 Nov 2001 19:30:03 -0800

Hello,

At the ETSI IPv6 plugtest at Cannes last week, we managed to 
achieve interoperability for the Authentication Sub Option.
There were two independent implentations (one from HUT) and
one from us (Nokia Research, Mt. View). There were also
conformance tests from Ericsson Research, Hungary to test
the Authentication Sub Option. The tests were successful.
We used static security associations for the tests.

IMHO, It is very easy to implement. Compared to this AH
checksum calculation is a mess.

The auth checksum was calculated over the following fields 
(as specifed in draft 15).

For the Binding Update

    -  The IPv6 address of the destination of the packet, as seen by the
       recipient
    -  Care-of Address, in the Source IP Address of the IPv6 header
    -  The Home Address of the mobile node, from the Home Address
       destination option
    -  Option Type of the Binding Update destination option
    -  Option Length of the Binding Update destination option
    -  All flags of the Binding Update destination option
    -  Reserved Field of the Binding Update destination option
    -  Sequence Number Field of the Binding Update
    -  Lifetime of the Binding Update destination option
    -  The entire data from all Binding Update Sub-Options (except the
       Authentication Data suboption), if any others exist
    -  The Type (i.e., the 8-bit value 0x04) and the Length of the
       Authentication Data Sub-Option
    -  Security Parameters Index (SPI) of the Authentication Data
       Sub-Option

For the Binding Acknowledgement

    -  The IPv6 address of the destination of the packet, as seen by the
       recipient
    -  The Home Address of the sender
    -  Option Type of the Binding Acknowledgement destination option
    -  Option Length of the Binding Acknowledgement
    -  Status of the Binding Acknowledgement
    -  Sequence Number field of the Binding Acknowledgement
    -  Lifetime field of the Binding Acknowledgement destination option
    -  Refresh field of the Binding Acknowledgement destination option
    -  The entire data from all Binding Acknowledgement Sub-Options
       (except the Authentication Data suboption), if any others exist
    -  The Type (i.e., the 8-bit value 0x04) and the Length of the
       Authentication Data Sub-Option
    -  Security Parameters Index (SPI) of the Authentication Data
       Sub-Option

regards
Vijay