CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2020/05/26 14:24:31
Modified files:
sbin/iked : crypto.c iked.conf.5 iked.h ikev2.c ikev2.h
ikev2_msg.c parse.y policy.c
Log message:
Add AES-GCM mode ciphers (IANA IDs 19 and 20) for IKEv2.
They can be configured with the new ikesa enc options aes-128-gcm,
aes-256-gcm, aes-128-gcm-12 and aes-256-gcm-12.
Tested with Strongswan by Stephan Mendling and myself
Tested with Juniper SRX by remi@
ok sthen@, patrick@
