ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/gvpe/doc/gvpe.5
(Generate patch)

Comparing gvpe/doc/gvpe.5 (file contents):
Revision 1.1 by pcg, Fri Jun 11 15:56:12 2004 UTC vs.
Revision 1.2 by pcg, Thu Nov 11 17:41:55 2004 UTC

… …
127.\} 127.\}
128.rm #[ #] #H #V #F C 128.rm #[ #] #H #V #F C
129.\" ======================================================================== 129.\" ========================================================================
130.\" 130.\"
131.IX Title "GVPE 5" 131.IX Title "GVPE 5"
132.TH GVPE 5 "2004-06-11" "1.7" "GNU Virtual Private Ethernet" 132.TH GVPE 5 "2004-09-18" "1.7" "GNU Virtual Private Ethernet"
133.SH "NAME" 133.SH "NAME"
134GNU\-VPE \- Overview of the GNU Virtual Private Ethernet suite. 134GNU\-VPE \- Overview of the GNU Virtual Private Ethernet suite.
135.SH "DESCRIPTION" 135.SH "DESCRIPTION"
136.IX Header "DESCRIPTION" 136.IX Header "DESCRIPTION"
137\&\s-1GVPE\s0 is a suite designed to provide a virtual private network for multiple 137\&\s-1GVPE\s0 is a suite designed to provide a virtual private network for multiple
… …
213\& ./configure --enable-hmac-length=16 --enable-rand-length=8 --enable-digest=sha1 213\& ./configure --enable-hmac-length=16 --enable-rand-length=8 --enable-digest=sha1
214.Ve 214.Ve
215.PP 215.PP
216This uses a 16 byte \s-1HMAC\s0 checksum to authenticate packets (I guess 8\-12 216This uses a 16 byte \s-1HMAC\s0 checksum to authenticate packets (I guess 8\-12
217would also be pretty secure ;) and will additionally prefix each packet 217would also be pretty secure ;) and will additionally prefix each packet
218with 8 bytes of random data. 218with 8 bytes of random data. In the long run, people should move to
219\&\s-1SHA\-224\s0 and beyond, but support in openssl is missing as of writing this
220document.
219.PP 221.PP
220In general, remember that \s-1AES\-128\s0 seems to be more secure and faster than 222In general, remember that \s-1AES\-128\s0 seems to be more secure and faster than
221\&\s-1AES\-192\s0 or \s-1AES\-256\s0, more randomness helps against sniffing and a longer 223\&\s-1AES\-192\s0 or \s-1AES\-256\s0, more randomness helps against sniffing and a longer
222\&\s-1HMAC\s0 helps against spoofing. \s-1MD4\s0 is a fast digest, \s-1SHA1\s0 or \s-1RIPEMD160\s0 are 224\&\s-1HMAC\s0 helps against spoofing. \s-1MD4\s0 is a fast digest, \s-1SHA1\s0 or \s-1RIPEMD160\s0 are
223better, and Blowfish is a fast cipher (and also quite secure). 225better, and Blowfish is a fast cipher (and also quite secure).

Diff Legend

– Removed lines
+ Added lines
< Changed lines
> Changed lines