summaryrefslogtreecommitdiffstats
path: root/share/doc/IPv6
diff options
context:
space:
mode:
authorume <ume@FreeBSD.org>2003-10-13 14:57:41 +0000
committerume <ume@FreeBSD.org>2003-10-13 14:57:41 +0000
commitfd41336ef5a14e7f322b0a8af359c45ce03d4cc8 (patch)
tree2a5d44fe2e98a214421d56ae5f3dea9a73bd2413 /share/doc/IPv6
parentb24bb74b9ee088f076e89f68095367a214f7cc1d (diff)
downloadFreeBSD-src-fd41336ef5a14e7f322b0a8af359c45ce03d4cc8.zip
FreeBSD-src-fd41336ef5a14e7f322b0a8af359c45ce03d4cc8.tar.gz
- support AES counter mode for ESP.
- use size_t as return type of schedlen(), as there's no error check needed. - clear key schedule buffer before freeing. Obtained from: KAME
Diffstat (limited to 'share/doc/IPv6')
-rw-r--r--share/doc/IPv6/IMPLEMENTATION7
1 files changed, 4 insertions, 3 deletions
diff --git a/share/doc/IPv6/IMPLEMENTATION b/share/doc/IPv6/IMPLEMENTATION
index 5bc6bd6..50ca516 100644
--- a/share/doc/IPv6/IMPLEMENTATION
+++ b/share/doc/IPv6/IMPLEMENTATION
@@ -1731,6 +1731,7 @@ Currently supported algorithms are:
HMAC SHA2-384 with 96bit crypto checksum (no document)
HMAC SHA2-512 with 96bit crypto checksum (no document)
HMAC RIPEMD160 with 96bit crypto checksum (RFC2857)
+ AES XCBC MAC with 96bit crypto checksum (RFC3566)
new IPsec ESP
null encryption (rfc2410.txt)
DES-CBC with derived IV
@@ -1739,9 +1740,9 @@ Currently supported algorithms are:
3DES-CBC with explicit IV (rfc2451.txt)
BLOWFISH CBC (rfc2451.txt)
CAST128 CBC (rfc2451.txt)
- RIJNDAEL/AES CBC (draft-ietf-ipsec-ciph-aes-cbc-00.txt,
- uses IANA-assigned protocol number)
- TWOFISH CBC (draft-ietf-ipsec-ciph-aes-cbc-00.txt)
+ RIJNDAEL/AES CBC (rfc3602.txt)
+ AES counter mode (draft-ietf-ipsec-ciph-aes-ctr-03.txt)
+
each of the above can be combined with:
ESP authentication with HMAC-MD5(96bit)
ESP authentication with HMAC-SHA1(96bit)
OpenPOWER on IntegriCloud