Hi Mugur,
> 
> need to support with strongSwan an "exotic" cipher implemented both by
> the NPU and the remote system.

Adding a new ESP cipher is possible, but not straight forward. You'll
need to add support in several layers:

- First, of course, the kernel needs support for this algorithm in the
  crypto API
- The kernel needs support for the new algorithm in the XFRM subsystem
- Choose an IKEv2 algorithm identifier (in private space?) for your
  algorithm
- Add a proposal configuration option for the algorithm identifier
- Extend the kernel interface by the new cipher


Regards
Martin



_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to