search

tireddy2 / ikev2-pqc-auth

0 stars 0 forks source link

Incorrect text regarding SUPPORTED_AUTH_METHODS #6

Closed smyslov closed 6 months ago

smyslov commented 6 months ago

The following text:

_The initiator includes the SUPPORTED_AUTH_METHODS notification in the IKE_SAINIT request message, with the PQC digital signature scheme(s) supported by it, ordered by its preference.

is incorrect. The initiator includes the SUPPORTED_AUTH_METHODS notification in the IKE_AUTH request message (or in the IKE_INTERMEDIATE request). Thus, the responder sends this notification first (in the IKE_SA_INIT response) and the initiator sends it later (in the next request message).

tireddy2 commented 6 months ago

Thanks, fixed text as follows: The initiator includes the SUPPORTED_AUTH_METHODS notification in either the IKE_AUTH request message or in the IKE_INTERMEDIATE request. This notification lists the PQC digital signature scheme(s) supported by the initiator, ordered by preference.