RE: [LinkSec] RE: algorithm choices - criteria
DJ:
>Putting the mode specific fields in the payload is the right approach
>for all the usual reasons (layering, futureproofing, HW/SW flexibility
>etc.). The counter argument is that is contracts the MTU in the payload
>and this may be a problem for some manufacturers. I'm not sure how
>putting the security fields outside the payload would be less of a
>problem, but that's the argument for what its worth.
SDE had this problem too. It turned out to be a problem in practice, and
fragmentation was added to the SDE standard to handle it. It is very
simple fragmentation because there are never more than two fragments. When
management was available, the max MTU was set smaller to allow for the
crypto expansion. This a much cleaner solution.
>I'm not allowed to think about frame formats until the end of next week
>due to 802.16 and 802 handoff..
You have such a compartmented life ...
Russ