@techreport{chunduri-tcp-ao-extensions-for-karp-kmp-00,
    number =    {draft-chunduri-tcp-ao-extensions-for-karp-kmp-00},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-chunduri-tcp-ao-extensions-for-karp-kmp/00/},
    author =    {Uma Chunduri and Albert Tian},
    title =     {{TCP-AO extensions for KARP-KMP}},
    pagetotal = 12,
    year =      2011,
    month =     oct,
    day =       24,
    abstract =  {This document discusses the possible extensions for TCP Authentication Option (TCP-AO) to better integrate and maximize the benefits, when deployed with Key Management Protocols (KMPs). TCP-AO as defined in RFC5925 can obtain master key from KMP and uses a Key Derivation Function (KDF) to generate traffic keys to protect the TCP sessions. In this mode, not all the benefits from the KMP can be realized. This document introduces an alternative approach for TCP-AO that allows TCP-AO to realize all the operational and security benefits from the deployed KMP.},
}