Directories
¶
| Path | Synopsis |
|---|---|
|
Package aggfrag implements the AGGFRAG payload of RFC 9347 (IP-TFS): the aggregation and fragmentation format that replaces a plain inner IP packet inside an ESP SA once both peers have agreed USE_AGGFRAG.
|
Package aggfrag implements the AGGFRAG payload of RFC 9347 (IP-TFS): the aggregation and fragmentation format that replaces a plain inner IP packet inside an ESP SA once both peers have agreed USE_AGGFRAG. |
|
Package eap implements the minimal EAP machinery needed for IKEv2 username/password authentication: the EAP packet format (RFC 3748) and the EAP-MSCHAPv2 method (RFC 2759 / RFC 3079).
|
Package eap implements the minimal EAP machinery needed for IKEv2 username/password authentication: the EAP packet format (RFC 3748) and the EAP-MSCHAPv2 method (RFC 2759 / RFC 3079). |
|
Package esp implements a minimal userspace ESP (RFC 4303) data path with UDP encapsulation (RFC 3948).
|
Package esp implements a minimal userspace ESP (RFC 4303) data path with UDP encapsulation (RFC 3948). |
|
IKE_INTERMEDIATE (RFC 9242) carrying an additional key exchange (RFC 9370), which is how a post-quantum KEM is bolted onto IKEv2 without changing IKE_SA_INIT: the classical group still runs in IKE_SA_INIT, and ML-KEM runs in a protected exchange afterwards, so the KEM's large public key and ciphertext never appear in an unauthenticated, amplifiable datagram.
|
IKE_INTERMEDIATE (RFC 9242) carrying an additional key exchange (RFC 9370), which is how a post-quantum KEM is bolted onto IKEv2 without changing IKE_SA_INIT: the classical group still runs in IKE_SA_INIT, and ML-KEM runs in a protected exchange afterwards, so the KEM's large public key and ciphertext never appear in an unauthenticated, amplifiable datagram. |
|
Package payload implements IKEv2 wire-format encoding/decoding of the IKE header and payloads as defined by RFC 7296.
|
Package payload implements IKEv2 wire-format encoding/decoding of the IKE header and payloads as defined by RFC 7296. |
|
Package probe is a minimal IKEv2 initiator used to smoke-test a running server: it performs IKE_SA_INIT + IKE_AUTH (PSK or EAP-MSCHAPv2), requests a config address, then sends one ESP packet and reports the assigned address.
|
Package probe is a minimal IKEv2 initiator used to smoke-test a running server: it performs IKE_SA_INIT + IKE_AUTH (PSK or EAP-MSCHAPv2), requests a config address, then sends one ESP packet and reports the assigned address. |
|
Package transform maps IKEv2 IANA transform IDs onto concrete cryptographic primitives.
|
Package transform maps IKEv2 IANA transform IDs onto concrete cryptographic primitives. |
Click to show internal directories.
Click to hide internal directories.