X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=NOTES;h=001c118e96f9401592560ea3332583b653ac2c55;hb=564022994befb8f71b89ae015751b22c34ae3ee8;hp=a681d75f231cb21c0e6b316ee12e77444907bdd9;hpb=16339fe17a2a565da0628be523f6ef8ca907f3f5;p=secnet.git diff --git a/NOTES b/NOTES index a681d75..001c118 100644 --- a/NOTES +++ b/NOTES @@ -284,14 +284,11 @@ Capability flag bits must be in one the following two categories: 1. Early capability flags must be advertised in MSG1 or MSG2, as applicable. If MSG3 or MSG4 advertise any "early" capability bits, - MSG1 or MSG3 (as applicable) must have advertised them too. Sadly, - advertising an early capability flag will produce MSG1s which are - not understood by versions of secnet which predate the capability - mechanism. - -2. Late capability flags are advertised in MSG2 or MSG3, as - applicable. They may also appear in MSG1, but this is not - guaranteed. MSG4 must advertise the same set as MSG2. + MSG1 or MSG3 (as applicable) must have advertised them too. + +2. Late capability flags may be advertised only in MSG2 or MSG3, as + applicable. They are only in MSG1 with newer secnets; older + versions omit them. MSG4 must advertise the same set as MSG2. Currently, the low 16 bits are allocated for negotiating bulk-crypto transforms. Bits 8 to 15 are used by Secnet as default capability