Re: vpn encryption

[Peter Fairbrother <peter.fairbrother@ntlworld.com>]

> taproot420 wrote:

> I saw on the gov. site that is was the new FIPS, that's why I want to
> run it and asked. Ok, so if Openbsd can what about a remote client that
> can use this encryption? All the clients I have seen only do 3-des I
> believe, so if you know of one please advise. I was really looking for
> it as a way to sup up the security for remote workers so a client for
> winbloz would be needed.
> 

I'm no Windows expert, but clients should be readily available, AES is THE
essential standard for new implementations, and it is being/has been added
to most clients that are maintained - and you don't want a client that isn't
maintained, especially in Windoze!

Note that AES isn't significantly more secure than 3-DES (some people think
it's sometimes the other way round, however there are two or more versions
of 3-DES), but it is a lot faster, less cpu-hungry, and generally better all
round.

-- Peter Fairbrother