> There are two differences: > > - both generating and checking public key signatures is more expensive > than just hashes > > - for CGA, a host needs to store a private key somehwere, with HBA > there are no secrets Yes, and in addition generating the key pair take some time. These are not being disputed, Eric simply was disagreeing with the value of those of differences. Jari _______________________________________________ Ietf@xxxxxxxx https://www1.ietf.org/mailman/listinfo/ietf