[Ach] Comments for VPN-section

[christian mock]

On Mon, Dec 16, 2013 at 10:44:37PM +0100, Karsten Iwen wrote:

> 5) Under Authentication you mention that the PSK should not be shorter then the output of the hash. Is there a reference for that?

There's a discussion on the relevant IETF list, I've added a link.

cm.

-- 
Christian Mock                          Wiedner Hauptstr. 15
Senior Security Engineer                1040 Wien
CoreTEC IT Security Solutions GmbH      +43-1-5037273
FN 214709 z

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
CoreTEC: Web Application Audit - Damit so etwas nicht passiert!

http://heise.de/-1260559

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.