encrdes(7M)

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | SEE ALSO

NAME

encrdes- DES-CBC Encryption Algorithm Module for IPsec

SYNOPSIS

strmod/encrdes

DESCRIPTION

This module implements the United States Data Encryption Standard (DES) for IPsec. encrdes uses cipher-block chaining (CBC), as per RFC 2405 and has the following properties:

Key Size

64 bits. 56 bit key, plus 8 parity bits. 7 bits of key are followed by one bit of odd parity. For example, the 56-bit key FF FF FF FF FF FF FF would be encoded as FE FE FE FE FE FE FE FE. encrdes supports weak-key checking and parity-fixing to aid pf_key(7P).

Block Size

64 bits.

It is used by ESP.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWcsr (32-bit)
	SUNWcarx.u (64-bit)
Interface Stability	Evolving

SEE ALSO

ipseckey(1M), attributes(5), ipsec(7P), ipsecesp(7P), pf_key(7P)

Madson, C., and Doraswamy, N, RFC 2405, The ESP DES-CBC Cipher Algorithm with Explicit IV, The Internet Society, 1998.

NIST, FIPS PUB 46-2: Data Encryption Standard, December, 1993.

NAME | SYNOPSIS | DESCRIPTION | ATTRIBUTES | SEE ALSO