	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

05/20/2009 at 05:27AM PDT, ID: 24424157

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.6

OpenBSD IPsec AES-256 encryption problem

Asked by radar264 in OpenBSD, IPSec Security Protocol

OpenBSD IPsec AES 256 encryption problem

I am having problems using Manual Configuration of SAs on OpenBSD IPsec when i try to use AES encryption with a key of greater than 128.

The OpenBSD ipsec.conf man pages specify the following encryption ciphers.

Cipher Key Length
des 56 bits
3des 168 bits
aes 128 bits

aes-128 128 bits
aes-192 192 bits
aes-256 256 bits
aesctr 160 bits [phase 2 only]
blowfish 160 bits
cast 128 bits
skipjack 80 bits
null (none) [phase 2 only]

I cannot get it to work with aes-128, aes-192 or aes-256. All the others work fine.

Example of WORKING ipsec.conf
{
esp tunnel from 1.2.3.4 to 4.3.2.1 spi 0x4242:0x4243 enc aes authkey file "authfile:authfile" enckey file "keyfile:keyfile"

flow esp from 1.2.3.4 to 4.3.2.1
}

Example of NOT-WORKING ipsec.conf
{
esp tunnel from 1.2.3.4 to 4.3.2.1 spi 0x4242:0x4243 enc aes-256 authkey file "authfile:authfile" enckey file "keyfile:keyfile"

flow esp from 1.2.3.4 to 4.3.2.1
}

The Error message when I use the aes-256 is:-

ipsecctl: unsupported encryption algorithm 7

Using OpenBSD versions 4.4 and 4.5, both have the same problem.

Anyone got any ideas what the issue is ?

Please NOTE. I DO NOT want to use ISAKMP and PKI, I must use Manual SAs

View the Solution FREE for 30 Days

20091028-EE-VQP-88 - Hierarchy / EE_QW_4_20070622

1. gheist 27,980
2. mr_egypt... 4,650
3. noci 3,000
4. oklit 2,750
5. arnold 2,000
5. Roachy1... 2,000
5. manav08 2,000
5. MSI_inst... 2,000
9. uetian1707 1,500
9. ryansoto 1,500
11. svs 1,000
11. jar3817 1,000
11. woolmilkp... 1,000
11. bevhost 1,000
11. flob9 1,000
16. maysara 200
17. SagiEDoc 80

1. gheist 165,068
2. it_alchem... 20,000
3. sunnycoder 7,324
4. noci 6,200
5. mr_egypt... 4,902
6. JustUNIX 4,000
7. Crossley 3,470
8. svs 3,000
9. oklit 2,750
10. DonKoyote 2,500
10. SteveSloan 2,500
12. jimbb 2,330
13. arnold 2,080
14. smokeyser 2,000
14. jasonsbytes 2,000
14. uetian1707 2,000
14. rindi 2,000
14. vico1 2,000
14. chingmd 2,000
14. anfi 2,000
14. Roachy1... 2,000
14. nixfreak 2,000
14. biscuit3 2,000
14. manav08 2,000
14. MSI_inst... 2,000

OpenBSD IPsec AES-256 encryption problem

Asked by radar264 in OpenBSD, IPSec Security Protocol

About this solution