[Swan] What are strongest ciphers that can be used for ike and phase2alg?

[Michael Furman]

I have
configured the following:

ike=aes256-sha2_256;modp2048

phase2alg=aes256-sha2_256;modp2048

What are strongest ciphers that can be used for ike and
phase2alg?

Is it aes256-sha2_512?

Can I configure aes512?

Cannot find it here:

https://libreswan.org/man/ipsec.conf.5.html

 

Any performance overhead with the stronger ciphers?

 

Thank you for your help in advance.

 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20160530/49e05075/attachment-0001.html>