Re: IPCop IPSec w/ DES_CBC
Eric Shubert <[email protected]>
| Newsgroups | gmane.comp.security.ipcop.devel |
|---|---|
| Organization | Eric Shubert & Associates |
| Message-ID | <[email protected]> |
On 06/26/2012 08:08 AM, Eric Shubert wrote: > Is it possible to build an IPCop with IPSec that supports the DES_CBC > encryption algorithm? > > DES_CBC is what the iPad/iPhone native IPSec implementation appears to > be using: > pluto[21485] "StephIPad"[4] 174.26.92.118 #4: OAKLEY_DES_CBC is not > supported. Attribute OAK LEY_ENCRYPTION_ALGORITHM > > TIA for any pointers. > I see now that des_cbc is insecure. Openswan could be build with a USE_WEAKSUFF?=true setting, but that would not be advisable. Pardon the noise as I sort this stuff out. -- -Eric 'shubes' ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/