HardenedBSD/usr.sbin/keyadmin/keys
Garrett Wollman 1cd1e41621 This is the `key' program from NRL's IPv6 distribution, heavily
hacked up by me to remove the IPv6 stuff (fow now).  I renamed
it `keyadmin' since `key' was already taken by the S/Key calculator.
Its purpose is to act as a command-driven interface to the `PF_KEY'
socket domain, analogously to thefunction of route(8) in the
`PF_ROUTE' domain.  This program is believed to be exportable, since
it does no actual cryptography itself.
1996-06-17 19:47:57 +00:00

19 lines
793 B
Plaintext

# This is an example key file.
# The format of entries in this file is as follows:
# <type> <spi> <src> <dst> <transform> <key> [iv]
#
# where:
#
# <type> is currently one of { ah | esp }
# <spi> is a decimal number
# <src> is an IP address for the source this association applies to
# <dst> is an IP address for the destination this assoc. applies to
# <transform> is currently one of { md5 } for ah, { des-cbc } for esp
# <key> is a hexadecimal key value (key length is derived from hex len)
# [iv] is a hexadecimal initial value (length is derived from hex len)
# [this field is required for des-cbc, ignored for others]
ah 1142 ::0 ::0 md5 0123456789abcdef0123456789abcdef
esp 1984 ::0 ::0 des-cbc 0123456789abcdef 11223344