Re: [Freeipmi-devel] Reg Cipher Suites

[Al Chu]

Hi John,

(Sorry for the late reply, your message got mixed in with a bunch of
kruft).

As mentioned in the FreeIPMI manpages, the following cipher suite IDs
are supported.

----
              0 - Authentication Algorithm = None; Integrity Algorithm =
None; Confidentiality Algorithm = None

              1 - Authentication Algorithm = HMAC-SHA1; Integrity
Algorithm = None; Confidentiality Algorithm = None

              2 - Authentication Algorithm = HMAC-SHA1; Integrity
Algorithm = HMAC-SHA1-96; Confidentiality Algorithm = None

              3 - Authentication Algorithm = HMAC-SHA1; Integrity
Algorithm = HMAC-SHA1-96; Confidentiality Algorithm = AES-CBC-128

              6 - Authentication Algorithm = HMAC-MD5; Integrity
Algorithm = None; Confidentiality Algorithm = None

              7 - Authentication Algorithm = HMAC-MD5; Integrity
Algorithm = HMAC-MD5-128; Confidentiality Algorithm = None

              8 - Authentication Algorithm = HMAC-MD5; Integrity
Algorithm = HMAC-MD5-128; Confidentiality Algorithm = AES-CBC-128

              11 - Authentication Algorithm = HMAC-MD5; Integrity
Algorithm = MD5-128; Confidentiality Algorithm = None

              12 - Authentication Algorithm = HMAC-MD5; Integrity
Algorithm = MD5-128; Confidentiality Algorithm = AES-CBC-128
----

It seems you're particularly interested in the Cipher Suite IDs that use
xRC4.  Do you have a motherboard that supports it?  Part of the reason
it was never supported in FreeIPMI is b/c no motherboard I ever saw
supported it.

Al

On Mon, 2010-04-12 at 03:37 -0700, Winston John wrote:
> Hi All,
> 
>          I would like to know the cipher suite ID's supported by free
> ipmi.  Is Cipher suite 4,6,9,10,13,14 supported in free ipmi ? Please
> let me know your comments.
> 
> Thanks,
> Winston
-- 
Albert Chu
address@hidden
Computer Scientist
High Performance Systems Division
Lawrence Livermore National Laboratory