Subject: [Isis-wg] [Technical Errata Reported] RFC5310 (2461)

From: RFC Errata System <[email-masked]>
Date: Thu, 12 Aug 2010 11:51:14 -0700 (PDT)

The following errata report has been submitted for RFC5310,
"IS-IS Generic Cryptographic Authentication".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=5310&eid=2461

--------------------------------------
Type: Technical
Reported by: Tony Li <[email-masked]>

Section: 3.4

Original Text
-------------
The authentication data for the IS-IS IIH PDUs MUST be computed after
the IS-IS Hello (IIH) has been padded to the MTU size, if padding is 
not explicitly disabled.

Corrected Text
--------------
The authentication data for the IS-IS IIH PDUs MUST be computed after
the IS-IS Hello (IIH) has been padded to the MTU size, if padding is
not explicitly disabled.

ISes (routers) that implement CRYPTO_AUTH authentication and initiate LSP
purges MUST remove the body of the LSP and add the authentication TLV.  

Notes
-----
The RFC ignores the case of when an IS initiates a purge.  Purges MUST be authenticated explicitly, otherwise the default protocol machinery will leave open a trivial attack.

Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC5310 (draft-ietf-isis-hmac-sha-07)
--------------------------------------
Title               : IS-IS Generic Cryptographic Authentication
Publication Date    : February 2009
Author(s)           : M. Bhatia, V. Manral, T. Li, R. Atkinson, R. White, M. Fanto
Category            : PROPOSED STANDARD
Source              : IS-IS for IP Internets
Area                : Routing
Stream              : IETF
Verifying Party     : IESG