xref: /onnv-gate/usr/src/cmd/cmd-inet/etc/ipsecalgs (revision 10824:c47254a96e5d)
10Sstevel@tonic-gate#
20Sstevel@tonic-gate#
3*10824SMark.Fenwick@Sun.COM# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
40Sstevel@tonic-gate# Use is subject to license terms.
50Sstevel@tonic-gate#
60Sstevel@tonic-gate# CDDL HEADER START
70Sstevel@tonic-gate#
80Sstevel@tonic-gate# The contents of this file are subject to the terms of the
92616Spwernau# Common Development and Distribution License (the "License").
102616Spwernau# You may not use this file except in compliance with the License.
110Sstevel@tonic-gate#
120Sstevel@tonic-gate# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
130Sstevel@tonic-gate# or http://www.opensolaris.org/os/licensing.
140Sstevel@tonic-gate# See the License for the specific language governing permissions
150Sstevel@tonic-gate# and limitations under the License.
160Sstevel@tonic-gate#
170Sstevel@tonic-gate# When distributing Covered Code, include this CDDL HEADER in each
180Sstevel@tonic-gate# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
190Sstevel@tonic-gate# If applicable, add the following below this CDDL HEADER, with the
200Sstevel@tonic-gate# fields enclosed by brackets "[]" replaced with your own identifying
210Sstevel@tonic-gate# information: Portions Copyright [yyyy] [name of copyright owner]
220Sstevel@tonic-gate#
230Sstevel@tonic-gate# CDDL HEADER END
240Sstevel@tonic-gate#
250Sstevel@tonic-gate# DO NOT EDIT OR PARSE THIS FILE!
260Sstevel@tonic-gate#
270Sstevel@tonic-gate# Use the ipsecalgs(1m) command to change the contents of this file.
28*10824SMark.Fenwick@Sun.COM# The algorithm descriptions contained in this file are synchronised to the
29*10824SMark.Fenwick@Sun.COM# kernel with ipsecalgs -s, the kernel validates the entries at this point.
300Sstevel@tonic-gate
310Sstevel@tonic-gate# PROTO|protocol-id|protocol-name|exec-mode
320Sstevel@tonic-gate##  NOTE:  Some protocol numbers are well-known and defined in <netdb.h>
330Sstevel@tonic-gate
340Sstevel@tonic-gatePROTO|2|PROTO_IPSEC_AH|sync
350Sstevel@tonic-gatePROTO|3|PROTO_IPSEC_ESP|sync
360Sstevel@tonic-gate
370Sstevel@tonic-gate# ALG|protocol-id|alg-id|name,name,...|ef-id| \
38*10824SMark.Fenwick@Sun.COM#	{default/}{key,key..}or{key-key,inc}|block_size or MAC-size|\
39*10824SMark.Fenwick@Sun.COM#	[parameter,parameter..]|[flags]
40*10824SMark.Fenwick@Sun.COM#
41*10824SMark.Fenwick@Sun.COM## Note:   Parameters and flags only apply to certain algorithms.
420Sstevel@tonic-gate
430Sstevel@tonic-gateALG|2|0|none,any|-|0|0
440Sstevel@tonic-gateALG|2|2|hmac-md5,md5|CKM_MD5_HMAC_GENERAL|128|12
450Sstevel@tonic-gateALG|2|3|hmac-sha1,sha,sha1,sha-1,hmac-sha,hmac-sha-1|CKM_SHA_1_HMAC_GENERAL|160|12
466126SdanmcdALG|2|5|hmac-sha256,sha256,sha-256,hmac-sha-256|CKM_SHA256_HMAC_GENERAL|256|16
476126SdanmcdALG|2|6|hmac-sha384,sha384,sha-384,hmac-sha-384|CKM_SHA384_HMAC_GENERAL|384|24
486126SdanmcdALG|2|7|hmac-sha512,sha512,sha-512,hmac-sha-512|CKM_SHA512_HMAC_GENERAL|512|32
490Sstevel@tonic-gateALG|3|0|any|-|0|0
500Sstevel@tonic-gateALG|3|2|des-cbc,des|CKM_DES_CBC|64|8
510Sstevel@tonic-gateALG|3|3|3des-cbc,3des|CKM_DES3_CBC|192|8
52*10824SMark.Fenwick@Sun.COMALG|3|7|blowfish-cbc,blowfish|CKM_BLOWFISH_CBC|128|8
530Sstevel@tonic-gateALG|3|11|null|-|0|0
542616SpwernauALG|3|12|aes-cbc,aes|CKM_AES_CBC|128/128-256,64|16
55*10824SMark.Fenwick@Sun.COMALG|3|14|aes-ccm8|CKM_AES_CCM|128/128-256,64|16|8,8,3|15
56*10824SMark.Fenwick@Sun.COMALG|3|15|aes-ccm12|CKM_AES_CCM|128/128-256,64|16|8,12,3|15
57*10824SMark.Fenwick@Sun.COMALG|3|16|aes-ccm,aes-ccm16|CKM_AES_CCM|128/128-256,64|16|8,16,3|15
58*10824SMark.Fenwick@Sun.COMALG|3|18|aes-gcm8|CKM_AES_GCM|128/128-256,64|16|8,8,4|23
59*10824SMark.Fenwick@Sun.COMALG|3|19|aes-gcm12|CKM_AES_GCM|128/128-256,64|16|8,12,4|23
60*10824SMark.Fenwick@Sun.COMALG|3|20|aes-gcm,aes-gcm16|CKM_AES_GCM|128/128-256,64|16|8,16,4|23
61