Table 14 esp and ah – ZyXEL Communications ZyXEL ZyWALL P1 User Manual

Page 66

Advertising
background image

ZyWALL P1 User’s Guide

Chapter 3 Wizard Setup

65

An added feature of the ESP is payload padding, which further protects communications by
concealing the size of the packet being transmitted.

Table 14 ESP and AH

ESP

AH

Encryption

DES (default)
Data Encryption Standard (DES) is a

widely used method of data encryption

using a secret key. DES applies a 56-bit

key to each 64-bit block of data.

3DES
Triple DES (3DES) is a variant of DES,

which iterates three times with three

separate keys (3 x 56 = 168 bits),

effectively doubling the strength of DES.

AES
Advanced Encryption Standard is a

newer method of data encryption that

also uses a secret key. This

implementation of AES applies a 128-bit

key to 128-bit blocks of data. AES is

faster than 3DES.

Select NULL to set up a phase 2 tunnel

without encryption.

Authentication

MD5 (default)
MD5 (Message Digest 5) produces a

128-bit digest to authenticate packet

data.

MD5 (default)
MD5 (Message Digest 5) produces a

128-bit digest to authenticate packet

data.

SHA1
SHA1 (Secure Hash Algorithm) produces

a 160-bit digest to authenticate packet

data.

SHA1
SHA1 (Secure Hash Algorithm) produces

a 160-bit digest to authenticate packet

data.

Select MD5 for minimal security and SHA-1 for maximum security.

Advertising