[strongSwan] diffie hellman or RSA

Andreas Steffen andreas.steffen at strongswan.org
Sun Sep 25 22:13:33 CEST 2011

strongSwan exclusively uses Diffie-Hellman for key exchange. There is an
RSA encryption variant for IKEv1 but which is rarely used at all.



On 09/25/2011 03:26 PM, nima chavooshi wrote:
> Hi
> In some documents I have read about diffie hellman and RSA. according
> those documents usage of diffie hellman and RSA is equal, in fact, those
> method are used for key exchange.but must only one method to be selected. 
> In StrongSwan, I have to set both RSA and diffie hellman in ike or esp
> values. so I am a little confused.
> Thanks for any help or guidance 

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Users mailing list