Case 2: IPsec (cont'ed)

• USAGI Implementation

• Features

  • Modularized encryption/hash engines using cryptoapi
  • Well-integrated in IP stack
    • PF_KEYv2 interface with FreeS/WAN extensions
      • Expecting support from users
  • Support transport/tunnel mode
  • IPv6/IPv4 universal
  • High quality (by TAHI Conformance Test)

• Proposal for 2.6 was not approved as proposed

  • Much more abstraction needed
  • Much more discussion with maintainers had been required