netdev - [RFC][PATCH][XFRM][0/5] extension for XFRM databases

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20070201114339.E2BD.SHINTA@sfc.wide.ad.jp>
Date:	Thu, 01 Feb 2007 13:09:51 +0900
From:	Shinta Sugimoto <shinta@....wide.ad.jp>
To:	netdev@...r.kernel.org
Cc:	Francis Dupont <Francis.Dupont@...nt6.net>,
	Masahide Nakamura <nakam@...ux-ipv6.org>,
	usagi-core@...ux-ipv6.org
Subject: [RFC][PATCH][XFRM][0/5] extension for XFRM databases

Hello,

Let me issue a request for comments for the patch set developed by
the USAGI project.  The patch set aims to extend the XFRM framework
so that endpoint addresses in the XFRM databases, namely XFRM policy
and XFRM state can be dynamically updated according to a request from
user application.  This feature is required for Mobile IPv6 to follow
the security requirements specified in RFC3776.  More specifically,
the Mobile Node and Home Agent need to update the endpoint addresses
of the IPsec tunnel when the Mobile Node changes its attachment point
(Care-of Address) to the Internet.  The kernel also notifies userland
application via both Netlink and PF_KEY sockets so that user application
(e.g. IKE Daemon) could be informed of the updates appropriately.
More detailed information of motivation/rationale for this feature
can be found in the internet draft[1].

The patch set consists of following patches:

[1/5] [XFRM]: Extension to the XFRM framework for dynamic update of endpoint address(es)
[2/5] [XFRM]: User interface for handling XFRM_MSG_MIGRATE
[3/5] [XFRM]: CONFIG_XFRM_MIGRATE option
[4/5] [PFKEYV2]: Extension to the PF_KEYv2 framework for dynamic update of endpoint address(es)
[5/5] [PFKEYV2]: CONFIG_NET_KEY_MIGRATE option

Any comments/suggestions are appreciated.
Thank you very much.

[1]: http://www.ietf.org/internet-drafts/draft-sugimoto-mip6-pfkey-migrate-03.txt

Regards,
Shinta

-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html