Hello Misc,
While I was reading through the man pages for ipsec.conf and
ipsecctl, I noticed that for automatic keying there is no way to
specify any type of key size. I was wondering if anyone know of a way
to do that, because I am very interested in setting up strong crypto
ipsec tunnels using AES with 256bit keys, and ipsec.conf says AES only
uses 128bit keys. I'm sure it can be done in Manual Keying mode, as
I've used blowfish up to 448bit keys in manual mode, however I would
really like to use Automatic Keying mode in a future installation I am
planning.