HP UX IPSec Software manual Transformname, Ipsecconfig Transforms, Transform Name Description

Configuring HP-UX IPSec

Step 1: Configuring Host IPSec Policies

	Where:
	transform_name
	The transform_name is one of the following AH (Authentication
	Header) or ESP (Encapsulation Security Payload) transform
	specifications, or a nested AH and ESP transform formed by joining an
	AH transform and an ESP transform with a plus sign (+). For example,
	AH_MD5+ESP_3DES.
TIP	AES128 is the most secure form of encryption, with performance
	comparable to or better than DES and 3DES. For added security, use
	AES in an authenticated ESP transform, such as
	ESP_AES128_HMAC_SHA1.
	ESP transforms without authentication (such as ESP-AES128) do not
	provide data integrity and should not be used.
Table 3-2	ipsec_config Transforms
	Transform Name	Description
	AH_MD5	AH, with 128-bit key Hashed Message
		Authentication Code using RSA Message
		Digest-5, HMAC-MD5.
	AH_SHA1	AH, with 160-bit key HMAC using Secure
		Hash Algorithm-1, HMAC-SHA1.
	ESP_AES128	ESP with 128-bit Advanced Encryption
		Standard CBC.
	ESP_AES128_HMAC_MD5	ESP AES128, authenticated with
		HMAC-MD5.
	ESP_AES128_HMAC_SHA1	ESP AES128, authenticated with
		HMAC-SHA1.
	ESP_DES	ESP with 56-bit Data Encryption
		Standard, Cipher Block Chaining Mode,
		DES-CBC.
	ESP_DES_HMAC_MD5	ESP DES, authenticated with
		HMAC-MD5.

76 Chapter 3