2
votes
1answer
165 views

PFS incentive during IKE Phase 2

I'm trying to see the actual point in implementing Perfect Forward Secrecy during Internet Key Exchange Phase 2, if it had already been used during Phase 1. Quoting the IKEv2 RFC: RFC 5596 ...
3
votes
1answer
953 views

OpenVPN Why CBC mode is recommended?

I just set up my installation of OpenVPN on my server. I am curious why the OpenVPN manual recommends CBC mode. I heard that CBC is predictable and not secure; is that true?
7
votes
3answers
2k views

Why does OpenVPN require securely sharing certs with clients?

The ubuntu docs on OpenVPN have this part in the instructions: Copy the following files to the client: /etc/openvpn/ca.crt /etc/openvpn/easy-rsa/keys/hostname.crt ...
19
votes
2answers
4k views

symmetric encryption session keys in SSL/TLS

This question concerns the session send and receive keys used in SSL/TLS protocol. my understanding is that this key uses symmetric encryption (DES, AES, BlowFish, etc.) I'm wondering, if ...
8
votes
2answers
2k views

3DES vs DES for VPN connections

I'm trying to get Android 2.1 phones to connect to our corporate VPN, but it would appear they only support DES rather than 3DES for encryption. Is it safe to use DES, am I going to get hacked if I ...
17
votes
4answers
1k views

IPsec (Internet Protocol Security) facts

Internet Protocol Security (IPsec) is a successor of the ISO standard Network Layer Security Protocol (NLSP). What are the advantages, disadvantages, other interesting facts regarding the protocol?