encrdes(7M)

NAME

     encrdes - DES-CBC Encryption Algorithm Module for IPsec

SYNOPSIS

     strmod/encrdes

DESCRIPTION

     This module implements the  United  States  Data  Encryption
     Standard  (DES)  for IPsec. encrdes uses cipher-block chain-
     ing (CBC), as per RFC 2405 and has the following properties:

          Key Size
                64 bits. 56 bit key, plus 8 parity  bits. 7  bits
                of key are followed by one bit of odd parity. For
                example, the 56-bit key FF FF  FF  FF  FF  FF  FF
                would  be  encoded  as  FE  FE FE FE FE FE FE FE.
                encrdes supports weak-key checking   and  parity-
                fixing to aid pf_key(7P).

          Block Size
                64 bits.

      It is used by ESP.

ATTRIBUTES

     See attributes(5) for descriptions of the  following  attri-
     butes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcsr (32-bit)            |
    |_____________________________|_____________________________|
    |                             | SUNWcarx.u (64-bit)         |
    |_____________________________|_____________________________|
    | Interface Stability         | Evolving                    |
    |_____________________________|_____________________________|

SEE ALSO

     ipseckey(1M),   attributes(5),   ipsec(7P),    ipsecesp(7P),
     pf_key(7P)

     Madson, C., and Doraswamy, N,  RFC  2405,  The  ESP  DES-CBC
     Cipher  Algorithm  with  Explicit  IV, The Internet Society,
     1998.

     NIST, FIPS PUB 46-2:  Data  Encryption  Standard,  December,
     1993.