ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/doc/gvpe.protocol.7.pod
(Generate patch)

Comparing gvpe/doc/gvpe.protocol.7.pod (file contents):
Revision 1.9 by root, Wed Jul 10 01:51:40 2013 UTC vs.
Revision 1.10 by root, Fri Jul 12 04:16:18 2013 UTC

… …
145 145
146SEQNO is a 32-bit sequence number. It is negotiated at every connection 146SEQNO is a 32-bit sequence number. It is negotiated at every connection
147initialization and starts at some random 31 bit value. VPE currently uses 147initialization and starts at some random 31 bit value. VPE currently uses
148a sliding window of 512 packets/sequence numbers to detect reordering, 148a sliding window of 512 packets/sequence numbers to detect reordering,
149duplication and replay attacks. 149duplication and replay attacks.
150
151The encryption is done on RAND+SEQNO+DATA in CBC mode with zero IV (or,
152equivalently, the IV is RAND+SEQNO, encrypted with the block cipher,
153unless RAND size is decreased or increased over the default value).
150 154
151=head2 The authentication protocol 155=head2 The authentication protocol
152 156
153Before nodes can exchange packets, they need to establish authenticity of 157Before nodes can exchange packets, they need to establish authenticity of
154the other side and a key. Every node has a private RSA key and the public 158the other side and a key. Every node has a private RSA key and the public

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines