[CentOS] establish a 128 bit encrypted tunnel between centos 5.2 boxes

Tue Aug 26 22:55:41 UTC 2008
Robert Moskowitz <rgm at htt-consult.com>

Jeff Kinz wrote:
> On Tue, Aug 26, 2008 at 04:04:21PM -0400, Jerry Geis wrote:
>> Is there an easy way or anyway to establish a 128 bit encrypted tunnel 
>> between a handful of centos 5.2 boxes?
> In addition the rest of the good info others already posted for you,
> please remember that "128 bit encryption" doesn't mean anything 
> unless you also specify the encryption scheme being used.
> A 128 bit encryption scheme may or may not be easily broken depending on
> which one it is. (Pick a good!)
Actually 'we' (crypto community) talk about crypto-suites, as you have 
to look at all the pieces involved. If everything is not disclosed (like 
with Skype), then you just don't know where the weakness may be.

SSH, IPsec (watch out for the 'Null' cipher :) ), TLS (some of the 
suites are too weak to talk about), and HIP are all well-rounded 
security protocols. I have worked on all of them.