3 ms·
Permitting key lifetime to disagree can allow an attacker to manipulate key lifetime, which could defeat perfect forward secrecy if the key lifetime is manipula
by 1_person 7y ago
Permitting key lifetime to disagree can allow an attacker to manipulate key lifetime, which could defeat perfect forward secrecy if the key lifetime is manipulated towards infinity or used to gather data for a known plaintext attack if the key lifetime is manipulated towards 0. Replay attacks also come to mind.
- jeltz 7y agoYes, but that is kinda proving his point. The issue with IPSec is that way too many things are configurable which shouldn't be.
- wrs 7y agoOr just have both sides pick the lowest/highest proposed lifetime with a fixed minimum/maximum. Or just don’t have lifetime be configurable, because what is the point?