Subject: [mobile-ip] -14 Authentication Data computation

From: "Karen E Nielsen (TED)" <[email-masked]>
Date: Thu, 30 Aug 2001 08:58:11 +0200

Comment/question to the computation of the Authentication Data covering a Binding Update and a Binding Acknowledgement in draft -14.

According to section 4.4 in draft-14 the Authentication Data covering a Binding Updata MUST be 
computed over a bit string containing the following IP addresses:
Destination IP Address of the IPv6 header 
Care-of Address, in the Source IP Address of the IPv6 header 
Home Address, from the Home Address destination option
+ some more data

And the Authentication Data covering a Binding Acknowledgement MUST be
computed over a bit string containing the following IP addresses :
Destination IP Address of the IPv6 header 
Source IP Address of the IPv6 header 
+ some more data

First of all I suppose that what is meant is
the destination addresses of the IPv6 header as it appears at the receiver end (in line with the computation of authentication data in IP SEC)  !?
Since both the BU (in case the CN is mobile) and the BUAck might be send using a routing header this will be important to specify, I think.

Secondly, in the case where the CN is itself a mobile node, the source address of the IP header of the BuAck will be a CoA of the CN,
which really has nothing to do with the acknowledgement of a BU sent to the CN - wouldn't the appropriate address to cover here be the Home address
of the CN -  either appearing in the source address of the IP header or in the Home Address option ?

/Karen

----------------------------------------------
Karen Egede Nielsen
Ericsson Telebit A/S, Research
Tel: + 45 89 38 51 00
Fax: + 45 89 38 51 01
Tel Direct: + 45 89 38 53 13
Email: [email-masked]/
           [email-masked]
----------------------------------------------