Subject: [Hipsec] New issue 17: Unifying HIP and ESP transforms

From: [email-masked] (Pekka Nikander)
Date: Mon Sep 8 08:06:01 2003

In the current spec the HIP transform only specifies an
encryption algorithm while the ESP transform specifies
both encryption and integrity algorithms.  Now, if we
specify an HMAP parameter, using HIP SA keying material,
we need to specify the integrity algorithm, too.

To solve this, I suggest that we unify the format and
ID codes for the HIP and ESP transforms.  That is, R1
and I2 would continue to have both parameters, but the
format and ID codes for both contents would be identical.

Additionally, if HMAC is used, we need to draw the integrity
keys from KEYMAT, too.  I would propose that the new
order would be the following:

	  <t>HIP initiator encryption key</t>
	  <t>HIP initiator integrity key</t>
	  <t>HIP responder encryption key (currently unused)</t>
	  <t>HIP responder integrity key</t>
	  <t>Initiator ESP key </t>
	  <t>Initiator AUTH key</t>
	  <t>Responder ESP key</t>
	  <t>Responder AUTH key</t>

Unless there are objections, I will make this change for -08.

--Pekka