Hi,
I was looking into how the keying material is divided to form the
IPSec keys. I couldn't find a satisfactory answer anywhere. Every
search pointed to the "Slicing and dicing" of keying material in the
IPSec Architecture draft-3... which has become obsolete. The IPSec RFC
also doesn't mention anything about this.

-How are the keys extracted from the keying material in IKE
implementation of Solaris 9.
-Is there any standard which is followed ..?

-Abhinav

In article <7929f375.0309162037.49016a2@posting.google.com> ,
Abhinav Anand <abhi88@yahoo.com> wrote:
<SNIP!>
>-How are the keys extracted from the keying material in IKE
>implementation of Solaris 9.
>-Is there any standard which is followed ..?

See RFC 2409, especially section 5.5, which covers Quick Mode. It depends on
if you use PFS or no PFS in Quick Mode.
--
Daniel L. McDonald - Solaris Networking & Security Engineering
Mail: danmcd@east.sun.com | * MY OPINIONS ARE NOT NECESSARILY SUN'S! *
1 Network Drive Burlington, MA |"rising falling at force ten
WWW: http://www.kebe.com/~danmcd | we twist the world and ride the wind" - Rush