cbc <--> ebc

[isk-admin]

Dear all,

is it possible to choose the different mode cbc <-- > ebc to establish a vpn-connection or how does it works!

Regards

Helmut

[m.sir]

ECB mode (Electronic CodeBook):

• Each plaintext block always gives the same

ciphertext block

• Vulnerable to insertion, replay, and dictionary

attack

CBC mode (Cipher Block Chaining):

• Before encrypting XOR onto the current plaintext

block with previous ciphertext block

• IPsec uses this mode in most cases

ECB mode (Electronic CodeBook):

• Each plaintext block always gives the same ciphertext block

• Vulnerable to insertion, replay, and dictionary attack

CBC mode (Cipher Block Chaining):

• Before encrypting XOR onto the current plaintext block with previous ciphertext block

I think CBC is used in all current Cisco Ipsec iplementation. I dont know way how to configure ebc support - maybe it was used in some older IOS versions but now is only cbc supported