[src/trunk]: src/crypto/dist/ipsec-tools/src/setkey also mention the aes-gcm ...

[drochner <drochner%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/b4c07d59d335
branches:  trunk
changeset: 773065:b4c07d59d335
user:      drochner <drochner%NetBSD.org@localhost>
date:      Thu Jan 26 21:11:27 2012 +0000

description:
also mention the aes-gcm ESP variants

diffstat:

 crypto/dist/ipsec-tools/src/setkey/setkey.8 |  12 ++++++++++--
 1 files changed, 10 insertions(+), 2 deletions(-)

diffs (30 lines):

diff -r 3a2abe5f46e4 -r b4c07d59d335 crypto/dist/ipsec-tools/src/setkey/setkey.8
--- a/crypto/dist/ipsec-tools/src/setkey/setkey.8       Thu Jan 26 21:10:24 2012 +0000
+++ b/crypto/dist/ipsec-tools/src/setkey/setkey.8       Thu Jan 26 21:11:27 2012 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: setkey.8,v 1.30 2012/01/09 15:41:21 wiz Exp $
+.\"    $NetBSD: setkey.8,v 1.31 2012/01/26 21:11:27 drochner Exp $
 .\"
 .\" Copyright (C) 1995, 1996, 1997, 1998, and 1999 WIDE Project.
 .\" All rights reserved.
@@ -726,11 +726,19 @@
 twofish-cbc    0 to 256        draft-ietf-ipsec-ciph-aes-cbc-01
 aes-ctr                160/224/288     rfc3686
 camellia-cbc   128/192/256     rfc4312
+aes-gcm-16     160/224/288     rfc4106
+aes-gmac       160/224/288     rfc4543
 .Ed
 .Pp
 Note that the first 128/192/256 bits of a key for
-.Li aes-ctr
+.Li aes-ctr ,
+.Li aes-gcm-16
+or
+.Li aes-gmac
 will be used as AES key, and the remaining 32 bits will be used as nonce.
+Also note that
+.Li aes-gmac
+does not encrypt the payload, it only provides authentication.
 .Pp
 These compression algorithms can be used as
 .Ar calgo