Table of Contents
Advertisement
Chapter 4
Configuration via the Command Line Interface
Cryptographic function
Key length [keylen]
Authentication Hashing
function [integrity]
Diffie-Hellman group
112
The table below shows the encryption algorithms supported by the SpeedTouch™
[crypto]
along with their corresponding key size:
Algorithm
DES
3DES
AES
DES is relatively slow and is the weakest of the algorithms, but it is the
industry standard.
3DES is a stronger version of DES, but is the slowest of the supported
algorithms (for a comparable key length).
AES is the new encryption standard selected by the American government to
replace DES/3DES. It is recommended to use AES since it is the most
advanced of the supported encryption methods.
The SpeedTouch™ supports 3 different key lengths for the AES encryption
algorithm. The
values are valid, as specified in the table above.
The DES and 3DES algorithms have a fixed key length. For these algorithms
the [keylen] parameter is not shown in the CLI.
The SpeedTouch™ supports two types of hashing algorithms:
Hashing algorithm
MD5
SHA1
HMAC is always used as integrity algorithm, combined with either MD5 or
SHA1.
SHA1 is stronger than MD5, but slightly slower.
The table below shows the supported Diffie-Hellman groups:
[group]
Diffie-Hellman group
number
1
2
5
Valid key sizes
(bits)
56
168
128, 192, 256
keylen
parameter assigns the key length for this algorithm. Three
number of bits
768
1024
1536
Popular sizes
Default size
56
56
168
168
128, 192, 256
-
Keyword
MODP768
MODP1024
MODP1536
E-DOC-CTC-20051017-0169 v0.1
Advertisement
Table of Contents
