summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBruno Thomsen <bruno.thomsen@gmail.com>2015-05-12 23:11:28 +0200
committerBruno Thomsen <bruno.thomsen@gmail.com>2015-05-12 23:11:28 +0200
commit3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150 (patch)
tree12d6d72bc0087a49e31bbbeec1872fe279a9a054
parentc55ec98a426a5654699d24d0ae00cb8b03f01933 (diff)
downloadpfsense-3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150.zip
pfsense-3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150.tar.gz
ipsec: pfs ecc nist curve support
Use nist curves as perfect forward security. Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
-rw-r--r--etc/inc/ipsec.inc5
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc
index 17b2153..3af1ce4 100644
--- a/etc/inc/ipsec.inc
+++ b/etc/inc/ipsec.inc
@@ -167,7 +167,10 @@ $p2_pfskeygroups = array(
15 => '15 (3072 bit)',
16 => '16 (4096 bit)',
17 => '17 (6144 bit)',
- 18 => '18 (8192 bit)'
+ 18 => '18 (8192 bit)',
+ 19 => '19 (nist ecp256)',
+ 20 => '20 (nist ecp384)',
+ 21 => '21 (nist ecp521)'
);
/*
OpenPOWER on IntegriCloud