NetBSD-current IPsec (from KAME) now supports rijndael algorithm for
	ESP encryption.  rijndael is the finalist of AES contest, and
	will be standardized in FIPS standard suite, to replace DES.

	AES finalist was picked on Oct 2, the official algorithm number is
	decided on Oct 3.  NetBSD-current has working rijndael support since
	Oct 3 (the foundation has been there waiting for algorithm number).

	The implementation is known to be interoperable with others.
	Also, it is possible to negotiate rijndael IPsec SA by using the
	latest racoon IKE daemon (pkgsrc/security/racoon, be sure to get
	version 20001004a).

	for more info: 
	http://www.nist.gov/aes/ (the algorithm itself)
	http://www.kame.net/	(KAME project where NetBSD IPsec comes from)
	http://www.netbsd.org/Documentation/network/ipsec/
				(NetBSD IPsec FAQ)

itojun