diff options
| author | ume <ume@FreeBSD.org> | 2003-10-13 14:57:41 +0000 |
|---|---|---|
| committer | ume <ume@FreeBSD.org> | 2003-10-13 14:57:41 +0000 |
| commit | fd41336ef5a14e7f322b0a8af359c45ce03d4cc8 (patch) | |
| tree | 2a5d44fe2e98a214421d56ae5f3dea9a73bd2413 /share/doc/IPv6 | |
| parent | b24bb74b9ee088f076e89f68095367a214f7cc1d (diff) | |
| download | FreeBSD-src-fd41336ef5a14e7f322b0a8af359c45ce03d4cc8.zip FreeBSD-src-fd41336ef5a14e7f322b0a8af359c45ce03d4cc8.tar.gz | |
- support AES counter mode for ESP.
- use size_t as return type of schedlen(), as there's no error
check needed.
- clear key schedule buffer before freeing.
Obtained from: KAME
Diffstat (limited to 'share/doc/IPv6')
| -rw-r--r-- | share/doc/IPv6/IMPLEMENTATION | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/share/doc/IPv6/IMPLEMENTATION b/share/doc/IPv6/IMPLEMENTATION index 5bc6bd6..50ca516 100644 --- a/share/doc/IPv6/IMPLEMENTATION +++ b/share/doc/IPv6/IMPLEMENTATION @@ -1731,6 +1731,7 @@ Currently supported algorithms are: HMAC SHA2-384 with 96bit crypto checksum (no document) HMAC SHA2-512 with 96bit crypto checksum (no document) HMAC RIPEMD160 with 96bit crypto checksum (RFC2857) + AES XCBC MAC with 96bit crypto checksum (RFC3566) new IPsec ESP null encryption (rfc2410.txt) DES-CBC with derived IV @@ -1739,9 +1740,9 @@ Currently supported algorithms are: 3DES-CBC with explicit IV (rfc2451.txt) BLOWFISH CBC (rfc2451.txt) CAST128 CBC (rfc2451.txt) - RIJNDAEL/AES CBC (draft-ietf-ipsec-ciph-aes-cbc-00.txt, - uses IANA-assigned protocol number) - TWOFISH CBC (draft-ietf-ipsec-ciph-aes-cbc-00.txt) + RIJNDAEL/AES CBC (rfc3602.txt) + AES counter mode (draft-ietf-ipsec-ciph-aes-ctr-03.txt) + each of the above can be combined with: ESP authentication with HMAC-MD5(96bit) ESP authentication with HMAC-SHA1(96bit) |
