[Swan-dev] AH and ESP

D. Hugh Redelmeier hugh at mimosa.com
Fri Apr 18 00:35:23 EEST 2014


I learned from Paul on Tuesday that Libreswan does not support AH with 
ESP.

Is this true for IKEv1 and IKEv2?

I went to a lot of work when writing the v1 code to get the
combinatorics of AH and ESP right.  I imagine that the code can be
simplified if there is no combining of AH and ESP.

If they cannot be combined, why bother with AH at all?  That ought to
be an even more significant simplification.


More information about the Swan-dev mailing list