Hi Michael, > I'm trying to find some documentation on what algorithms, if any, > StrongSwan uses for pre-shared key conditioning. Currently, none. Are there IKE implementations that do? You could obviously pre-process the PSKs before making them available to the daemon (they can be provided in binary form). Regards, Tobias