IPSEC links

• The IPSEC Protocols
  • General IPSEC or VPN information
  • IPSEC overview documents or slide sets
  • IPSEC information in languages other than English
  • RFCs and other reference documents
  • Analysis and critiques of IPSEC protocols
  • Background information on IP
• IPSEC Implementations
  • Vendors of IPSEC Implementations
    • Vendors with Linux products
    • IPSEC in router products
    • Operating systems with IPSEC support
  • Open source IPSEC implementations
    • Other Linux IPSEC implementations
    • IPSEC for BSD Unix
    • IPSEC implementations for other systems
• Interoperability
  • Interoperability test sites
  • Interoperability results

• FreeS/WAN project
• cryptography and security
• Linux resources

• The VPN Consortium is a group for vendors of IPSEC products.
• A VPN mailing list with a home page, a FAQ, some product comparisons, and many links.
• A list of IPSEC links from Lewis McCarthy at U Mass.

• Linux FreeS/WAN Overview Document
• A good introductory article with links to several articles on related topics
• SSH Communications Security
• Timestep Corporation's tutorial: go to their web site, then follow the "VPN Overview" link

• German
• Japanese

• Our document listing the RFCs relevant to Linux FreeS/WAN and giving various ways of obtaining both RFCs and Internet Drafts.
• IPSEC standards page maintained by VPNC. This covers both RFCs and Drafts, and classifies them in a fairly helpful way.
• RFC archive
• Internet Drafts related to IPSEC
• US government site with their FIPS standards
• Archives of the ipsec@tis.com mailing list where discussion of drafts takes place.
  • Eastern Canada
  • California.

• Counterpane's evaluation of the protocols
• Simpson's IKE Considered Dangerous paper. Note that this is a link to an archive of our mailing list. There are several replies in addition to the paper itself.
• Bellovin's papers page including his:
  • Security Problems in the TCP/IP Protocol Suite (1989)
  • Problem Areas for the IP Security Protocols (1996)
  • Probable Plaintext Cryptanalysis of the IP Security Protocols (1997)
• An errata list for the IPSEC RFCs.

• IP addressing
• IANA, Internet Assigned Numbers Authority
• CIDR, Classless Inter-Domain Routing
• Also see our bibliography

• The LASAT SafePipe[tm] series. is an IPSEC box based on an embedded MIPS running Linux with FreeS/WAN and a web-config front end. This company also host our freeswan.org web site.
• Rebel.com, makers of the Netwinder ARM Linux machine, have a new (mid-2000) division Rebel Networks whose product uses FreeS/WAN.
• Redcreek provide an open source Linux driver for their PCI hardware VPN card. This card has a 100 Mbit Ethernet port, an Intel 960 CPU plus more specialised crypto chips, and claimed encryption performance of 45 Mbit/sec. The PC sees it as an Ethernet board.
• According to a report on our mailing list, Watchguard use Linux in their Firebox product.
• According to the Linux Administrator's Security Guide, the Danish firm I-Data make a firewall/VPN product based on Linux and FreeS/WAN.
• A report on our mailing list describes an Axent product:

  Date: Thu, 10 Feb 2000
  From: "Hutton, Rob" <HuttonR@plymart.com>
   
  Axent has announced their first Linux support (or will very soon).  It is
  a black box for about $5K that supports up to 25 IPs and has the IPSEC VPN
  stuff.  It is clearly aimed at companies that currently have a large home
  office and smaller branch offices.  Run the $30-60K Solaris, NT, or HP
  version at the home office and put the $5K box at the branches.  All
  centrally manageable using the MMC console.
  

• Cisco IPSEC information
• Ascend, now part of Lucent, have some IPSEC-based products
• Bay Networks, now part of Nortel, use IPSEC in their Contivity switch product line
• 3Com have a number of VPN products, some using IPSEC

• Microsoft are putting IPSEC in their Windows 2000 server product
• IBM announce a release of OS390 with IPSEC support via a crypto co-processor
• Sun include IPSEC in Solaris 8
• Hewlett Packard offer IPSEC for their Unix machines

• pipsecd a lightweight implementation of IPSEC for Linux. Does not require kernel recompilation.
• U of Arizona
• NIST Cerebus

• Several large Japanese companies in a co-operative IPv6 and IPSEC project
• Naval Research Lab implementation of IPv6 and of IPSEC for IPv4
• OpenBSD includes IPSEC as a standard part of the distribution
• IPSEC for FreeBSD

• Helsinki U of Technolgy have implemented IPSEC for Solaris, Java and Macintosh

• National Instuitute of Standards and Technology
• RSA Data Security
• SSH Communications Security
• Internet Devices

ICSA offer certification programs for various security-related products. See their list of certified IPSEC products. Linux FreeS/WAN is not currently on that list, but several products with which we interoperate are.

• Document index file
• Beginning of this file.
• FreeS/WAN home page