STREAMS Modules                                       encrdes(7M)

NAME
     encrdes -  DES-CBC Encryption Algorithm Module for IPsec

SYNOPSIS
     strmod/encrdes

DESCRIPTION
     This module implements the  United  States  Data  Encryption
     Standard  ("DES")   for  IPsec.   encrdes  uses cipher-block
     chaining ("CBC"), as per RFC 2405 and has the following pro-
     perties:

          Key Size
                64 bits. 56 bit key, plus 8 parity  bits.  7 bits
                of key are followed by one bit of odd parity.
                 For example,  the 56-bit key FF FF FF FF  FF  FF
                FF   would be encoded as FE FE FE FE FE FE FE FE.
                encrdes supports weak-key checking   and  parity-
                fixing to aid pf_key(7P).

          Block Size
                64 bits.

     It is used by ESP.

  Export Restriction
     DES with an actual key strength of 56 bits is only available
     inside  the United States. DES has an effective key strength
     of approximately 56 bits and is only  available  inside  the
     United  States. DES cannot be realistically weakened for use
     outside the United States..

ATTRIBUTES
     See attributes(5)
      for descriptions of the following attributes:

     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | SUNWcryr (32-bit)           |
    |_____________________________|_____________________________|
    |                             | SUNWcryrx (64-bit)          |
    |_____________________________|_____________________________|
    | Interface Stability         | Evolving                    |
    |_____________________________|_____________________________|

SEE ALSO
     ipseckey(1M),attributes(5),ipsec(7P),ipsecesp(7P),pf_key(7P)

     Madson, C., and Doraswamy, N,  RFC  2405,  The  ESP  DES-CBC
     Cipher  Algorithm  with  Explicit  IV, The Internet Society,

SunOS 5.8           Last change: 11 Feb 1999                    1

STREAMS Modules                                       encrdes(7M)

     1998.

     NIST, FIPS PUB 46-2:  Data  Encryption  Standard,  December,
     1993.

SunOS 5.8           Last change: 11 Feb 1999                    2