Encryption methods can be used to set up an IPSec connections

Hi,

IPSec uses symmetric encryption algorithms to encrypt and decrypt data. Common symmetric encryption algorithms include:

• Data Encryption Standard (DES)

  DES was developed by the National Institute of Standards and Technology (NIST). It uses a 56-bit key to encrypt a 64-bit plaintext block.

• Triple Data Encryption Standard (3DES)

  3DES is an enhancement to DES and uses three different 56-bit keys (168 bits in total) to encrypt a plaintext block.

  Compared with DES, 3DES is slower but more secure.

• Advanced Encryption Standard (AES)

  AES is designed to replace 3DES and is faster and more secure than 3DES. AES supports three types of keys: AES-128, ES-192, and AES-256, which have key lengths of 128 bits, 192 bits, and 256 bits, respectively.

  The encryption algorithm with a longer key is more secure but slower. In general, AES-128 can meet security requirements.

• SM4

  SM4 is a commercial password block standard symmetric algorithm compiled by China's National Password Administration. The block length and key length are both 128 bits.

  Under high security requirements, using SM4 can meet the requirements.

Refer to: https://support.huawei.com/hedex/hdx.do?docid=EDOC1100068394&id=dc_fd_ipsec_0026&lang=en