Re: GSE

[Iljitsch van Beijnum <iljitsch@muada.com>]

On Sat, 22 Feb 2003, Francis Dupont wrote:

>    Is there a good write-up of HIP yet?

> => draft-jokela-hip-packets-xx.txt and old I-Ds by Robert Moskowitz.

Excellent, I'll look them up.

>    But you can't do routing over IPsec tunnels, so you need another
>    GRE tunnel.

> => fortunately this is not 100% true.

I meant "routing protocols" here.

>    Then comes the ESP overhead, which is actually fairly small but they
>    chose to inlcude padding, which IMO was a mistake. Also, the
>    initialization vectors eat up a fair number of bytes, while it wouldn't
>    be very hard to come up with a scheme where the IV isn't carried inside
>    the packet.

> => both are properties of the algorithm(s), not of ESP itself.

Yes, padding and IVs are necessary. But that doesn't mean they have to
be carried in the packets. If you use a stream cipher you don't need to
pad. IVs can be generated independently by both ends from pre-shared
information.