strongSwan

h1. IKEv1 Cipher Suites

h2. Encryption Algorithms

|Keyword                         |Description                      |IKE |ESP | 

|*null*                          |Null encryption                  |    |x   |

|*aes128* or *aes*               |128 bit AES-CBC                  |x o |x   |

|*aes192*                        |192 bit AES-CBC                  |x o |x   |

|*aes256*                        |256 bit AES-CBC                  |x o |x   |

|*3des*                          |168 bit 3DES-EDE-CBC             |x o |x   |

|*blowfish128* or *blowfish*     |128 bit Blowfish-CBC             |x o |x   |

|*blowfish192*                   |192 bit Blowfish-CBC             |x o |x   |

|*blowfish256*                   |256 bit Blowfish-CBC             |x o |x   |

|*camellia128* or *camellia*     |128 bit Camellia-CBC             |    |x   |

|*camellia192*                   |192 bit Camellia-CBC             |    |x   |

|*camellia256*                   |256 bit Camellia-CBC             |    |x   |

|*serpent128* or *serpent*       |128 bit Serpent-CBC              |x   |x   |

|*serpent192*                    |192 bit Serpent-CBC              |x   |x   |

|*serpent256*                    |256 bit Serpent-CBC              |x   |x   |

|*twofish128* or *twofish*       |128 bit Twofish-CBC              |x   |x   |

|*twofish192*                    |192 bit Twofish-CBC              |x   |x   |

|*twofish256*                    |256 bit Twofish-CBC              |x   |x   |

*x* default built-in crypto library

*o* OpenSSL crypto library

h2. Integrity Algorithms

|Keyword                |Description   |IKE     |ESP     |

|*sha1* or *sha*        |SHA1 HMAC     | 96 bit | 96 bit |

|*sha2_256* or *sha256* |SHA2_256 HMAC |128 bit | 96 bit |

|*sha2_384* or *sha384* |SHA2_384 HMAC |192 bit |        |

|*sha2_512* or *sha512* |SHA2_512 HMAC |256 bit |        |

|*md5*                  |MD5 HMAC      | 96 bit | 96 bit |

|*aesxcbc*              |AES XCBC      |        | 96 bit |

h2. Diffie Hellman Groups

h3. RSA Groups

|Keyword    |DH Group |Modulus     |IKE |

|*modp768*  |=.  1    |>.768 bits  |g o |

|*modp1024* |=.  2    |>.1024 bits |g o | 

|*modp1536* |=.  5    |>.1536 bits |g o |

|*modp2048* |=. 14    |>.2048 bits |g o |

|*modp3072* |=. 15    |>.3072 bits |g o |

|*modp4096* |=. 16    |>.4096 bits |g o |

|*modp6144* |=. 17    |>.6144 bits |g o |

|*modp8192* |=. 18    |>.8192 bits |g o |

h3. Elliptic Curve Groups

|Keyword    |DH Group |Modulus    |IKE |

|*ecp192*   |=. 25    |>.192 bits |o   |

|*ecp224*   |=. 26    |>.224 bits |o   |

|*ecp256*   |=. 19    |>.256 bits |o   |

|*ecp384*   |=. 20    |>.384 bits |o   |

|*ecp521*   |=. 21    |>.521 bits |o   |

*g* GMP multi-precision library

*o* OpenSSL crypto library