Hi Jari,
As for the number of hash verifications, it would seem that you only have to verify those addresses that you actually use for exchanging packets with the peer. That is, if there is no problem you don't necessarily have to verify anything. And if you have a problem, it suffices to test the addresses that you actually end up switching to instead. (I'm still wondering whether the test packets sent to address X need verification of X; there may be some denial-of-service issues if we don't do that.)
regards, marcelo
--Jari
------------------------------------------ Please note that my former email address mbagnulo@ing.uc3m.es is no longer in use Please send mail to: marcelo at it dot uc3m dot es ------------------------------------------