[Openswan Users] How to enable DES in phase 2 (openswan version 2.6.24)

Paul Wouters paul at xelerance.com
Wed Jan 20 11:07:26 EST 2010


On Wed, 20 Jan 2010, mix.kao wrote:

> We need the phase 2 single DES support
> I set USE_WEAKSTUFF?=true in Makefile.inc then i can get DES suport in
> phase 1.
> How to get DES support in phase 2?

Single DES can be cracked in hours now. Do not use it. One of the next
versions will have all support for 1DES completely removed. If you want
to test without using a cpu intensive cipher, use null encryption (esp=null)

Paul


More information about the Users mailing list