denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add NEWS about TKM separation

Browse Source
This commit is contained in:
Reto Buerki
2013-03-19 15:24:36 +01:00
committed by Tobias Brunner
parent c57b7a66c3
commit db50a35ad8
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+8
View File
@@ -43,6 +43,14 @@ strongswan-5.0.3
any authentication. Therefore, to use this backend it has to be selected
explicitly with rightauth2=xauth-noauth.
- The new charon-tkm IKEv2 daemon delegates security critical operations to a
separate process. This has the benefit that the network facing daemon has no
knowledge of keying material used to protect child SAs. Thus subverting
charon-tkm does not result in the compromise of cryptographic keys.
The extracted functionality has been implemented from scratch in a minimal TCB
(trusted computing base) in the Ada programming language. Further information
can be found at http://www.codelabs.ch/tkm/.
strongswan-5.0.2
----------------