Re: [pkcs11] Proposed IKE spec for 3.1

Hi Bob,

thanks for the IKE spec. I don' know IKE so well, so I cannot comment on if it suits the RFCs. Therefore, some more "structural" comments and questions.

If I understand correctly CKM_IKE_PRF_DERIVE is for IKEv1 and IKEv2, CKM_IKE1_PRF_DERIVE and CKM_IKE_APP_B_PRF_DERIVE for IKEv1 only, and CKM_IKE_PRF_PLUS_DERIVE for IKEv2 only. Therefore, I would suggest to use "IKEx" in all the names, i.e. rename CKM_IKE_APP_B_PRF_DERIVE to CKM_IKE1_APP_B_PRF_DERIVE and rename CKM_IKE_PRF_PLUS_DERIVE to CKM_IKE2_PRF_DERIVE (i.e. also get rid of "PLUS"). Params should be renamed accordingly.