encraes(7M)

NAME

      encraes - AES-CBC  encryption  algorithm for IPsec

SYNOPSIS

     strmod/encraes

DESCRIPTION

     The  encraes  module  implements  AES,  the  US   Government
     Advanced Encryption Standard for IPsec. This module uses the
     cipher-block chaining mode (CBC) pursuant to RFC  2451.  The
     encraes module has the following properties:

     Key size
           128, 192, or 256 bits.  The  key  length  affects  the
           number  of  rounds  performed  per  cipher  block, and
           therefore affects the speed of the algorithm.

     Block Size
           128 bits

ATTRIBUTES

     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcryr  (32-bit)          |
    |_____________________________|_____________________________|
    |                             | SUNWcryrx  (64-bit)         |
    |_____________________________|_____________________________|
    | Interface Stability         | Evolving                    |
    |_____________________________|_____________________________|

SEE ALSO

     ipseckey(1M),   attributes(5),   ipsec(7P),    ipsecesp(7P),
     pf_key(7P)

     Pereira, R. and Adams, R. RFC 2451, The ESP CBC-Mode  Cipher
     Algorithms, The Internet Society, 1998.