diff options
author | Bruno Thomsen <bruno.thomsen@gmail.com> | 2015-05-12 23:11:28 +0200 |
---|---|---|
committer | Bruno Thomsen <bruno.thomsen@gmail.com> | 2015-05-12 23:11:28 +0200 |
commit | 3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150 (patch) | |
tree | 12d6d72bc0087a49e31bbbeec1872fe279a9a054 | |
parent | c55ec98a426a5654699d24d0ae00cb8b03f01933 (diff) | |
download | pfsense-3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150.zip pfsense-3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150.tar.gz |
ipsec: pfs ecc nist curve support
Use nist curves as perfect forward security.
Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
-rw-r--r-- | etc/inc/ipsec.inc | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc index 17b2153..3af1ce4 100644 --- a/etc/inc/ipsec.inc +++ b/etc/inc/ipsec.inc @@ -167,7 +167,10 @@ $p2_pfskeygroups = array( 15 => '15 (3072 bit)', 16 => '16 (4096 bit)', 17 => '17 (6144 bit)', - 18 => '18 (8192 bit)' + 18 => '18 (8192 bit)', + 19 => '19 (nist ecp256)', + 20 => '20 (nist ecp384)', + 21 => '21 (nist ecp521)' ); /* |