IPsec: Add support for ChaCha20-Poly1305
authorMichael Tremer <michael.tremer@ipfire.org>
Sat, 15 Sep 2018 12:49:59 +0000 (13:49 +0100)
committerMichael Tremer <michael.tremer@ipfire.org>
Sat, 15 Sep 2018 12:49:59 +0000 (13:49 +0100)
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
config/vpn/security-policies/performance
config/vpn/security-policies/system
src/functions/functions.vpn-security-policies

index a40b454..0d4f0ee 100644 (file)
@@ -1,4 +1,4 @@
-CIPHER="AES128-GCM128 AES128-CBC"
+CIPHER="CHACHA20-POLY1305 AES128-GCM128 AES128-CBC"
 COMPRESSION="off"
 GROUP_TYPE="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
 INTEGRITY="SHA256"
index 311dd9e..5073447 100644 (file)
@@ -1,5 +1,5 @@
 KEY_EXCHANGE="ikev2"
-CIPHER="AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
+CIPHER="CHACHA20-POLY1305 AES256-GCM128 AES192-GCM128 AES128-GCM128 AES256-CBC AES192-CBC AES128-CBC"
 INTEGRITY="SHA512 SHA384 SHA256"
 GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
 LIFETIME="28800"
index d3717a9..db6e859 100644 (file)
@@ -92,6 +92,9 @@ declare -A VPN_SUPPORTED_CIPHERS=(
        [CAMELLIA192-CCM64]="192 bit CAMELLIA-CCM with 64 bit ICV"
        [CAMELLIA128-CCM64]="128 bit CAMELLIA-CCM with 64 bit ICV"
 
+       # DJB
+       [CHACHA20-POLY1305]="256 bit ChaCha20/Poly1305 with 128 bit ICV"
+
        # No Encryption
        [NULL]="No Encryption"
 )
@@ -164,6 +167,9 @@ declare -A CIPHER_TO_STRONGSWAN=(
        [CAMELLIA192-CCM64]="camellia192ccm64"
        [CAMELLIA128-CCM64]="camellia128ccm64"
 
+       # DJB
+       [CHACHA20-POLY1305]="chacha20poly1305"
+
        # No Encryption
        [NULL]="null"
 )