TeamForge : Post

Forum Topic - critical issue about QNX need for help: (2 Items)

View: as

lei zhou(deleted)

10/31/2011 4:58 AM

post89763

critical issue about QNX need for help

I am using QNX IPsec setkey. Seems QNX only support SHA1.

Does QNX IPsec support SHA256?
I checked the manual for IPsec and found no information.


Thanks a lot in advance!

Fernando Gonzalez(deleted)

10/31/2011 9:43 PM

post89786

Re: critical issue ... {SHA-256 supported?}

SHA-2 is a generic reference to: SHA-224, SHA-256, SHA-384, SHA-512.

Those are HMAC algorithms indicated as arguments to the function setkey (the utility to “Manually manipulate the IPsec 
SA/SP database”).

Please look for the section “Algorithms for protocol” in the page.

http://www.qnx.com/developers/docs/6.5.0/index.jsp?topic=/com.qnx.doc.neutrino_utilities/s/setkey.html


Parameter <aalgo> is indicated as two different parameters of setkey. See the parameters for authentication and 
encryption:

-A aalgo key
    Specify an authentication algorithm (aalgo) for the ah ...
-E ealgo key
    Specify an encryption algorithm (ealgo) for the esp ...

All of the SHA-2 appear to be there for Authentication.

-Fernando Gonzalez

Return