diff options
| author | Bruno Thomsen <bruno.thomsen@gmail.com> | 2015-05-12 23:15:58 +0200 |
|---|---|---|
| committer | Bruno Thomsen <bruno.thomsen@gmail.com> | 2015-05-12 23:15:58 +0200 |
| commit | b8e6729f245ebe84b036321fb4f37c5bd6826e2c (patch) | |
| tree | f1fff4153f6355812c13595a5737fa1dada74c24 | |
| parent | 3922114b1ddc0e5eeb8dd1c37bcd63bbe9448150 (diff) | |
| download | pfsense-b8e6729f245ebe84b036321fb4f37c5bd6826e2c.zip pfsense-b8e6729f245ebe84b036321fb4f37c5bd6826e2c.tar.gz | |
ipsec: pfs ecc brainpool curve support
Use brainpool curves as perfect forward security.
Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
| -rw-r--r-- | etc/inc/ipsec.inc | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/etc/inc/ipsec.inc b/etc/inc/ipsec.inc index 3af1ce4..808e203 100644 --- a/etc/inc/ipsec.inc +++ b/etc/inc/ipsec.inc @@ -170,7 +170,10 @@ $p2_pfskeygroups = array( 18 => '18 (8192 bit)', 19 => '19 (nist ecp256)', 20 => '20 (nist ecp384)', - 21 => '21 (nist ecp521)' + 21 => '21 (nist ecp521)', + 28 => '28 (brainpool ecp256)', + 29 => '29 (brainpool ecp384)', + 30 => '30 (brainpool ecp512)' ); /* |
