diff options
| author | 2021-04-28 12:10:46 -0700 | |
|---|---|---|
| committer | 2021-05-20 18:20:44 +0000 | |
| commit | 559c995af6539b0004baee7ab1c5dc809d2cd9cc (patch) | |
| tree | f255bae802b3273ae8792371c5f96d2ab94c5e12 /libs/androidfw/StringPool.cpp | |
| parent | 6c914b4bc61235d6a4ff3cc468de6eac286aadf8 (diff) | |
Improve IKEv2/IPsec VPN by proposing more IKE algorithms
This commit allows IKEv2/IPsec VPN to propose more algorithms that
newly added in IKE library. Those new algorithms have stronger
security guarantees and better performance.
It also improves the cooperability with
NordVpn. Previously, IKEv2/IPsec VPN only proposes PRF-HMAC-SHA1
and PRF-AES128-XCBC. NordVpn always prefer PRF-AES128-XCBC over
PRF-HMAC-SHA1 for security reasons, but few NordVpn servers have
broken PRF-AES128-XCBC support which will cause VPN setup to fail.
Proposing more PRFs can reduce the chance of selecting a broken
algorithms.
This commit also switches to use IKE library defined constants
Bug: 185265778
Test: atest FrameworksNetTests, CtsIkeTestCases
Test: new algorithms are manually tested
Change-Id: Id0983d4b73691b153ee0f1cf3bf63b215098a29a
Diffstat (limited to 'libs/androidfw/StringPool.cpp')
0 files changed, 0 insertions, 0 deletions