[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openswan-users
Subject:    Re: [Openswan Users] DH group 7
From:       Paul Wouters <paul () xelerance ! com>
Date:       2006-01-26 3:32:20
Message-ID: Pine.LNX.4.63.0601260431000.20072 () tla ! xelerance ! com
[Download RAW message or body]

On Wed, 25 Jan 2006, Marco Berizzi wrote:

> One of our customers has asked me to configure an ipsec tunnel.
> He proposed me the following DH group: 1,2,5 and 7. After a
> short googling I have found that DH group 7 specifies to use
> Elliptic Curve Cryptography (ECC). Will openswan support this
> DH group? Is it stronger than DH group 14, 15, 16, 17, 18?

It is currently not supported or planned. The use of ECC is more that
it is different then the standard factoring that is in use of the
other ciphers, so if someone tackles the factoring problem, then ECC
should be more resilent to that.

It's not that we do not want to support it. It is a matter of resources.

Paul
_______________________________________________
Users mailing list
Users@openswan.org
http://lists.openswan.org/mailman/listinfo/users
[prev in list] [next in list] [prev in thread] [next in thread]