Advanced Cipher Suite Examples » History » Version 11
« Previous -
Version 11/20
(diff) -
Next » -
Current version
Andreas Steffen, 10.09.2010 13:24
IKEv2 support for CTR, CCM, and GCM modes
Advanced Cipher Suite Examples¶
| Algorithm | Pluto Daemon | Charon Daemon |
| ECP 256, 384, 512 (DH groups 19, 20, 21) | IKEv1 | IKEv2 |
| MODP with subgroups (DH groups 22, 23, 24) | IKEv1 | IKEv2 |
| ECP 192, 224 (DH groups 25, 26) | IKEv1 | IKEv2 |
| ECDSA 256, 384, 521 | IKEv1 | IKEv2 |
| AES CTR | ESP | IKEv2+ESP |
| AES CCM | ESP | IKEv2+ESP |
| AES GCM | ESP | IKEv2+ESP |
| AES GMAC^ | ESP | ESP |
| Blowfish CBC | IKEv1+ESP | IKEv2+ESP |
| Camellia CBC | IKEv1+ESP | IKEv2+ESP |
| Serpent CBC | IKEv1+ESP | |
| Twofish CBC | IKEv1+ESP | |
| NULL encryption | ESP | ESP |
| AES XCBC | ESP | IKEv2+ESP |
| SHA256* | IKEv1+ESP | IKEv2+ESP |
| SHA384* | IKEv1+ESP | IKEv2+ESP |
| SHA512* | IKEv1+ESP | IKEv2+ESP |
^requires the AES-GMAC patch that will be integrated into the Linux 2.6.34 kernel.
*requires the SHA2 truncation patch that was integrated into the Linux 2.6.33 kernel.