Encryption Modules for IPsec and Kerberos

Strong encryption for IPsec and Kerberos is included in the Solaris 9 release. Prior to this release, encryption modules were available only on the Solaris Encryption Kit CD-ROM or through a web download. A number of these algorithms are now in the Solaris 9 operating environment. These algorithms include 56-bit DES privacy support for Kerberos as well as 56-bit DES and 128–bit 3-key Triple-DES support for IPsec.

Support for even stronger encryption is available on the Solaris Encryption Kit CD-ROM or through web download. IPsec supports the 128-bit, 192-bit, or 256-bit Advanced Encryption Standard (AES), and 32-bit to 448-bit Blowfish in 8–bit increments.

For information on IPsec support, see “IPsec (Overview)” in System Administration Guide: IP Services. For information on Kerberos support, see “Introduction to SEAM” in System Administration Guide: Security Services.