AES | Advanced Encryption Standard |
|---|---|
Symmetric encryption algorithm that is widely used in IPsec for data encryption. It comes in different key sizes (e.g., AES-128, AES-256). | |
| CBC | |
| CBC does not have this "authentication" capability | |
| GCM | |
| AES-GCM is an authenticated encryption algorithm designed to provide both authentication and privacy. | |
https://www.juniper.net/documentation/en_US/junos/topics/concept/ipsec-encryption-solutions.html
AES-GCM is an authenticated encryption algorithm designed to provide both authentication and privacy.
CBC does not have this "authentication" capability
| CBC | Cipher Block Chaining |
|---|---|
| |
IV ( initialization vector ) is to avoid to start at 1 to n, instead random to another random number
| |
| GCM | Galois/Counter Mode |
| to encrypt the data |
|
| GCM but only auth | GMAC or Galois Message Authentication Code |
| just for authenticate the date |
|
...