Re: [IPsec] IV in ESP packets for AES-CBC and AES-CTR methods

[Paul Hoffman <paul.hoffman at vpnc.org>]

At 8:22 PM +0530 5/11/09, ss murthy nittala wrote:
>The following sentence present in RFC 3602 creates some doubts whether IV in each packet is mandatory or not?
>
>"Including the IV in each datagram ensures that decryption of each
> received datagram can be performed, even when some datagrams are
> dropped, or datagrams are re-ordered in transit."

That is poor wording on the part of the RFC. It should read something like "The reason that the IV is included in each datagram is to ensure..."

--Paul Hoffman, Director
--VPN Consortium