Re: Notes about identifier - locator separator

[Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>]

Ran;

> > For a receiver to retrieve an appropriate cryptographic key or
> > a communication context for a packet, a long lasting ID in clear
> > text, as an index to the long lasting database of key or context,
> > must be carried by the packet.
> 
> SPIs in ESP/AH are examples of IDs contained in a packet used
> as an index to the Security Association state.  SPIs are not
> normally long-lasting -- typically only valid for the lifetime
> of the SA (plus epsilon).  Any sane key management strategy
> involves changing *session* keys *at least* every 24 hours,
> even for very strong cryptographic algorithms.

We are talking about host identity.

ESP/AH use IP addresses, which identify  hosts, and SPIs.

						Masataka Ohta