diff options
author | Bruno Thomsen <bruno.thomsen@gmail.com> | 2015-05-12 23:15:58 +0200 |
---|---|---|
committer | Bruno Thomsen <bruno.thomsen@gmail.com> | 2015-05-12 23:15:58 +0200 |
commit | b8e6729f245ebe84b036321fb4f37c5bd6826e2c (patch) | |
tree | f1fff4153f6355812c13595a5737fa1dada74c24 | |
parent | 3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150 (diff) | |
download | pfsense-b8e6729f245ebe84b036321fb4f37c5bd6826e2c.zip pfsense-b8e6729f245ebe84b036321fb4f37c5bd6826e2c.tar.gz |
ipsec: pfs ecc brainpool curve support
Use brainpool curves as perfect forward security.
Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
-rw-r--r-- | etc/inc/ipsec.inc | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc index 3af1ce4..808e203 100644 --- a/etc/inc/ipsec.inc +++ b/etc/inc/ipsec.inc @@ -170,7 +170,10 @@ $p2_pfskeygroups = array( 18 => '18 (8192 bit)', 19 => '19 (nist ecp256)', 20 => '20 (nist ecp384)', - 21 => '21 (nist ecp521)' + 21 => '21 (nist ecp521)', + 28 => '28 (brainpool ecp256)', + 29 => '29 (brainpool ecp384)', + 30 => '30 (brainpool ecp512)' ); /* |