Re: New multi6 draft: WIMP

[Jukka Ylitalo <jukka.ylitalo@nomadiclab.com>]

Iljitsch van Beijnum wrote:

> On 16-feb-04, at 7:50, Erik Nordmark wrote:
>
> > I don't see why this is a problem when
> > 1) the signalling protocol (which advances the hash element to 
> > use/reveal)
> >    has at most one outstanding operation
>
>
> I think this is harder than it would at first glance seem. For 
> instance, if a MitM can trigger both ends to start an exchange at 
> approximately the same time.
>
> This is why I chose to exchange a key in cleartext in my ODT draft in 
> the absense of strong authentication.
Hi Iljitsch,

The ephemeral IDs of the initiators protect the hosts in the case they 
start
the exchange at the same time. In other words, it is not possible that two
initiator's have identical hash chains and common context in both 
end-points.

If I didn't give an answer to the problem, could you elaborate the scenario.
(I am currently reading your ODT draft.)

Thanks, Jukka