[strongSwan] AES GCM question
    Guru Shetty 
    gurushettylists at gmail.com
       
    Wed Oct 24 19:39:34 CEST 2012
    
    
  
Hello All,
 In the test results page of the wiki for ikev2, the following
configuration is being used.
conn %default
	ikelifetime=60m
	keylife=20m
	rekeymargin=3m
	keyingtries=1
	keyexchange=ikev2
	ike=aes256gcm16-aesxcbc-modp2048!
	esp=aes256gcm16-modp2048!
Is there a reason for using "aesxcbc" for ike? Doesn't aes-gcm provide
both authenticity and confidentiality?
Also, if I want to use the transport mode for the above configuration,
do I need to worry about anything?
Thanks,
Guru
    
    
More information about the Users
mailing list