3.3 More on STREAMS implementation
Thesis by Santeri Paavolainen
Aalto's work was continued by Santeri Paavolainen who set out
to optimize the STREAMS implementation. Paavolainen rewrote
the code, and created ipsec2 which includes:
- ipsec2 core driver
- AH-HMAC-MD5 & AH-HMAC-SHA implementations (RFC 2014)
- ESP-DEC-CBC implementation (transport mode only)
- Security Policy Daemon
The main interest in the new implementation was to develop an
extensive framework for adding AH and ESP cryptographic
transforms during runtime, and to separate the Security Policy
from the part that implements it (i.e. SPD <==> IPSEC).
Unfortunately at this time performance figures for this
implementation are not available. Description of the
mechanisms used can be found on the links page.
Marcin Dobrucki, 1997