Project

General

Profile

Advanced Cipher Suite Examples

Algorithm IKEv1 IKEv2
ECP 256, 384, 512 (DH groups 19, 20, 21) IKEv1 IKEv2
MODP with subgroups (DH groups 22, 23, 24) IKEv1 IKEv2
ECP 192, 224 (DH groups 25, 26) IKEv1 IKEv2
ECDSA 256, 384, 521 IKEv1 IKEv2
AES CTR ESP IKEv2+ESP
AES CCM ESP IKEv2+ESP
AES GCM ESP IKEv2+ESP
AES GMAC^ ESP ESP
Blowfish CBC IKEv1+ESP IKEv2+ESP
Camellia CBC IKEv1+ESP IKEv2+ESP
Serpent CBC IKEv1+ESP
Twofish CBC IKEv1+ESP
NULL encryption ESP ESP
AES XCBC ESP IKEv2+ESP
SHA256* IKEv1+ESP IKEv2+ESP
SHA384* IKEv1+ESP IKEv2+ESP
SHA512* IKEv1+ESP IKEv2+ESP
ChaCha20 / Poly1305~ IKEv2+ESP

^requires the AES-GMAC patch that was integrated into the Linux 2.6.34 kernel.
*requires the SHA2 truncation patch that was integrated into the Linux 2.6.33 kernel.
~requires a Linux 4.2 kernel or newer.