The encraes module implements AES, the US Government Advanced Encryption Standard for IPsec. This module uses the cipher-block chaining mode (CBC) pursuant to RFC 2451. The encraes module has the following properties:

Key size

128, 192, or 256 bits. The key length affects the number of rounds performed per cipher block, and therefore affects the speed of the algorithm.

Block Size

128 bits

See attributes(5) for descriptions of the following attributes:

ipseckey(1M), attributes(5), ipsec(7P), ipsecesp(7P), pf_key(7P)

Pereira, R. and Adams, R. RFC 2451, The ESP CBC-Mode Cipher Algorithms, The Internet Society, 1998.