Hi, see my inline commenents:
On 11/24/2012 06:00 AM, ip flow wrote: > Hi, > > Does the implementations of supported cipher suites, listed at > http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites > are complaint to RFCs listed below? > > 1. IETF RFC 3602: The AES-CBC Cipher Algorithm and Its Use with IPsec > Yes, implemented for ESP by the Linux kernel, configurable by strongSwan > 2. IETF RFC 3686: Using Advanced Encryption Standard (AES) Counter > Mode With IPsec Encapsulating Security Payload (ESP) > Yes, implemented for ESP by the Linux kernel, configurable by strongSwan > 3. IETF RFC 2104: HMAC: Keyed-Hashing for Message Authentication > Yes, HMAC is supported both by the Linux Kernel and libstrongswan > 4. IETF RFC 2403: The Use of HMAC-MD5-96 within ESP and AH > Yes, implemented for ESP by the Linux kernel, configurable by strongSwan > 5. IETF RFC 2404: The Use of HMAC-SHA-1-96 within ESP and AH > Yes, implemented for ESP by the Linux kernel, configurable by strongSwan > 6. IETF RFC 2857: The Use of HMAC-RIPEMD-160-96 within ESP and AH > Partial, implemented for ESP by the Linux kernel but currently not configurable by strongSwan > 7. IETF RFC 3566: The AES-XCBC-MAC-96 Algorithm and Its Use With IPsec > Yes, implemented for ESP by the Linux kernel, configurable by strongSwan > 8. IETF RFC 3664: The AES-XCBC-PRF-128 Algorithm for the Internet Key > Exchange Protocol (IKE) > Yes, supported by libstrongswan > Thanks Best regards Andreas ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]==
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
