Re: [Ipsec-tools-devel] 3DES - 2 or 3 Key and Racoon

[Timo T. <tim...@ik...>]

Hi,

Philip Bellino wrote:
> Can someone tell me is ipsec-tools-0.7 Racoon performs 3DES-CBC 2Key or
> 3Key?

All IPSec implementations (should) do 3DES-CBC based on:
- RFC 2409 (see Appendix B) for ISAKMP messages
- RFC 1851 for ESP

Both define that 3DES has three separate keys, thus all standard
conforming IPsec implementations use the 3Key variant of 3DES. This is
also what racoon does.

Cheers,
  Timo