Project

General

Profile

Edit History

strongSwan User Documentation » Configuration Examples »

Advanced Cipher Suite Examples » History » Version 16

Tobias Brunner, 20.04.2016 12:09
Use tc macro

1 2 Andreas Steffen 
h1. Advanced Cipher Suite Examples
2 1 Andreas Steffen 





    3
    16
    Tobias Brunner
    
|*Algorithm*                              | *IKEv1*                                     | *IKEv2* |





    4
    16
    Tobias Brunner
    
|ECP 256, 384, 512 (DH groups 19, 20, 21) |{{tc(openssl-ikev1/alg-ecp-high/,IKEv1)}}    | {{tc(openssl-ikev2/alg-ecp-high/,IKEv2)}} |





    5
    16
    Tobias Brunner
    
|MODP with subgroups (DH groups 22, 23, 24)|{{tc(ikev1/alg-modp-subgroup/,IKEv1)}}      | {{tc(ikev2/alg-modp-subgroup/,IKEv2)}} |





    6
    16
    Tobias Brunner
    
|ECP 192, 224      (DH groups 25, 26)     |{{tc(openssl-ikev1/alg-ecp-low/,IKEv1)}}     | {{tc(openssl-ikev2/alg-ecp-low/,IKEv2)}} |





    7
    16
    Tobias Brunner
    
|ECDSA 256, 384, 521                      |{{tc(openssl-ikev1/ecdsa-certs/,IKEv1)}}     | {{tc(openssl-ikev2/ecdsa-certs/,IKEv2)}} |





    8
    16
    Tobias Brunner
    
|AES CTR                                  |{{tc(ikev1/esp-alg-aes-ctr/,ESP)}}           | {{tc(ikev2/alg-aes-ctr/,IKEv2+ESP)}} |





    9
    16
    Tobias Brunner
    
|AES CCM                                  |{{tc(ikev1/esp-alg-aes-ccm/,ESP)}}           | {{tc(ikev2/alg-aes-ccm/,IKEv2+ESP)}} |





    10
    16
    Tobias Brunner
    
|AES GCM                                  |{{tc(ikev1/esp-alg-aes-gcm/,ESP)}}           | {{tc(ikev2/alg-aes-gcm/,IKEv2+ESP)}} |





    11
    16
    Tobias Brunner
    
|AES GMAC^                                |{{tc(ikev1/esp-alg-aes-gmac/,ESP)}}          | {{tc(ikev2/esp-alg-aes-gmac/,ESP)}} |





    12
    16
    Tobias Brunner
    
|Blowfish CBC                             |{{tc(ikev1/alg-blowfish/,IKEv1+ESP)}}        |{{tc(ikev2/alg-blowfish/,IKEv2+ESP)}} |





    13
    16
    Tobias Brunner
    
|Camellia CBC                             |{{tc(openssl-ikev1/alg-camellia/,IKEv1+ESP)}}| {{tc(openssl-ikev2/alg-camellia/,IKEv2+ESP)}} |





    14
    16
    Tobias Brunner
    
|Serpent CBC                              |{{tc(gcrypt-ikev1/alg-serpent/,IKEv1+ESP)}}  | |





    15
    16
    Tobias Brunner
    
|Twofish CBC                              |{{tc(gcrypt-ikev1/alg-twofish/,IKEv1+ESP)}}  | |





    16
    16
    Tobias Brunner
    
|NULL encryption                          |{{tc(ikev1/esp-alg-null/,ESP)}}              | {{tc(ikev2/esp-alg-null/,ESP)}} |





    17
    16
    Tobias Brunner
    
|AES XCBC                                 |{{tc(ikev1/esp-alg-aesxcbc/,ESP)}}           | {{tc(ikev2/alg-aes-xcbc/,IKEv2+ESP)}} |





    18
    16
    Tobias Brunner
    
|SHA256*                                  |{{tc(ikev1/alg-sha256/,IKEv1+ESP)}}          | {{tc(ikev2/alg-sha256/,IKEv2+ESP)}} |





    19
    16
    Tobias Brunner
    
|SHA384*                                  |{{tc(ikev1/alg-sha384/,IKEv1+ESP)}}          | {{tc(ikev2/alg-sha384/,IKEv2+ESP)}} |





    20
    16
    Tobias Brunner
    
|SHA512*                                  |{{tc(ikev1/alg-sha512/,IKEv1+ESP)}}          | {{tc(ikev2/alg-sha512/,IKEv2+ESP)}} |





    21
    16
    Tobias Brunner
    
|ChaCha20 / Poly1305~                     |                                             | {{tc(ikev2/alg-chacha20poly1305/,IKEv2+ESP)}} |





    22
    1
    Andreas Steffen
    





    23
    16
    Tobias Brunner
    
^requires the "AES-GMAC patch":http://download.strongswan.org/testing/aes_gmac.patch.bz2 that was integrated into the Linux 2.6.34 kernel.





    24
    16
    Tobias Brunner
    
*requires the "SHA2 truncation patch":http://download.strongswan.org/testing/sha2.patch.bz2 that was integrated into the Linux 2.6.33 kernel.





    25
    15
    Andreas Steffen
    
~requires a Linux 4.2 kernel or newer.