<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<!-- saved from url=(0014)about:internet -->
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <meta http-equiv="Content-Style-Type" content="text/css" />
    <meta name="GENERATOR" content="Quadralay WebWorks AutoMap 2003 Platinum Edition Client for FrameMaker 8.6.6597.0" />
    <meta name="TEMPLATEBASE" content="emwebh8-1-17" />
    <meta name="LASTUPDATED" content="08/01/13 14:47:55" />
    <title>Supported IPsec Transforms and Algorithms </title>
    <!-- Copyright 2010-2013, Cisco Systems, Inc. All rights reserved. -->

    <link rel="StyleSheet" href="document.css" type="text/css" />
    <link rel="StyleSheet" href="catalog.css" type="text/css" />


<script> 
    var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1; 
   
    if(is_chrome){document.domain=document.domain}
   </script>
    <script type="text/javascript" language="JavaScript1.2" src="expand.js"></script>
    <script type="text/javascript" language="JavaScript1.2" src="page.js"></script>

    <script type="text/javascript" language="JavaScript1.2">
     <!--
      function  WWNoOp() {}
      function  WWNoValue() { return ""; }

      var  VarDropDown;

      if (typeof(HTMLHelp_Object) != "undefined")
      {
        VarDropDown = new WWDropDown_Object();
      }
      else
      {
        VarDropDown = new Object();
        VarDropDown.fAnchorOpen  = WWNoOp;
        VarDropDown.fAnchorClose = WWNoOp;
        VarDropDown.fDIVOpen  = WWNoOp;
        VarDropDown.fDIVClose = WWNoOp;
      }
     // -->
    </script>

  
<SCRIPT language="javascript">
<!--
  self.document.write("<link href='"+top.relPath+"shared/style.css' rel='stylesheet' type='text/css'>");
  myid=1728;
  self.document.write("<script type='text/javascript' language='JavaScript' src='"+top.relPath+"shared/con_utils.js'></scr"+"ipt>");
//-->
</SCRIPT>
</head>

  <body onload="highlightSearchTerms();" bgcolor="#ffffff">

    
    <blockquote>
    <a name="top"></a>

    
    


<a name="wp1073114"> </a><h1 class="pTitle">
Supported IPsec Transforms and Algorithms

</h1>
<a name="wp1073115"> </a><p class="pBody">
The component technologies implemented for IPsec include the following transforms: 

</p>
<div class="pSmartList1"><ul class="pSmartList1">
<a name="wp1073117"> </a><li class="pSmartList1">Advanced Encrypted Standard (AES) is an encryption algorithm. It implements either 128 or 256 
bits using Cipher Block Chaining (CBC) or counter mode.
</li>
<a name="wp1073119"> </a><li class="pSmartList1">Data Encryption Standard (DES) is used to encrypt packet data and implements the mandatory 
56-bit DES-CBC. CBC requires an initialization vector (IV) to start encryption. The IV is explicitly 
given in the IPsec packet. 
</li>
<a name="wp1073121"> </a><li class="pSmartList1">Triple DES (3DES) is a stronger form of DES with 168-bit encryption keys that allow sensitive 
information to be transmitted over untrusted networks. 
</li>
<a name="wp1073122"> </a><p class="pListNote1">
<strong>Note	&nbsp;&nbsp;&nbsp;</strong> Cisco NX-OS images with strong encryption are subject to United States government export 
controls, and have a limited distribution. Images to be installed outside the United States require 
an export license. Customer orders might be denied or subject to delay due to United States 
government regulations. Contact your sales representative or distributor for more information, 
or send e-mail to export@cisco.com. 

</p>
<a name="wp1073124"> </a><li class="pSmartList1">Message Digest 5 (MD5) is a hash algorithm with the HMAC variant. HMAC is a keyed hash variant 
used to authenticate data.
</li>
<a name="wp1073126"> </a><li class="pSmartList1">Secure Hash Algorithm (SHA-1) is a hash algorithm with the Hash Message Authentication Code 
(HMAC) variant. 
</li>
<a name="wp1073128"> </a><li class="pSmartList1">AES-XCBC-MAC is a Message Authentication Code (MAC) using the AES algorithm.
</li>
</ul></div>
<hr /><br><p class="pBody">Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.</p> 

    </blockquote>

  </body>
</html>
