[Openswan Users] Getting Error in establishing Tunnels with Blowfish, serpent and Twofish

[Paul Wouters]

On Wed, 9 Apr 2008, ankit garg wrote:

> I am using Linux kernel 2.6.20 and openswan-2.5.18dr3 for creating tunnels.During kernel compilation in make menuconfig-->cryptographic options, i checked the options of Blowfish,Twofish and Serpent Cipher algorithms and installed new kernel

> In making openswan-2.5.18dr3, i am doing following step:-
> source:- http://wiki.openswan.org/index.php/BuildingFromTarballsFor2/6

> If i skip step3 and make openswan than i am able to establish tunnels between two hosts(both using linux kernel 2.6.20 and openswan-2.5.18dr3)with 3des,aes,aes128 and aes256 algorithms.But i am not able to establish tunnels with Blowfish,serpent and twofish algorithms.

> For Blowfish:-
>
> 003 "net-net": requested kernel enc ealg_id=7 not present
> 034 "net-net": can not initiate: no acceptable kernel algorithms loaded

These ciphers are not supported natively in the KLIPS code, so you will need to enable KLIPS CryptoAPI.
Even then, I am not sure if KLIPS has been tested with these.

Paul