3 ms·
Ask HN: Who Has Reviewed IETF Draft IKE for IPsec with QKD?
The Abstract says "Quantum Key Distribution (QKD) is a mechanism for creating shared, secret, random bits. This document describes extensions to the IKEv2 protocol to use random bits created via QKD as keys for IPsec."
Section 6 Security Considerations says "Because QKD's principal role is to detect eavesdropping and discard possibly compromised bits, eavesdropping is a very effective denial of service (DoS) attack. One purpose of the fallback behavior negotiation is to provide network managers with a tool for alleviating this problem. Fallback methods should be used with extreme care, and SHOULD be coupled with event notification and monitoring."
Have you reviewed this IETF draft, and have any thoughts regarding implementation and potential changes to the draft’s proposals?