lear_cipher

Indicates which encryption algorithm is to be used.

Default: None

Value	FIPS MODE	Comments
DES-CBC DES-ECB DES-CFB DES-OFB DES	YES/NO	Algorithm uses fixed key size (8 bytes)
3DES-CBC 3DES-ECB 3DES-CFB 3DES-OFB 3DES	YES/NO	Algorithm uses fixed key size (24 bytes)
AES128-CBC AES128-ECB AES128-CFB AES128-OFB AES128	YES/NO	Algorithm uses fixed key size (16 bytes)
AES192-CBC AES192-ECB AES192-CFB AES192-OFB AES192	YES/NO	Algorithm uses fixed key size (24 bytes)
AES256-CBC AES256-ECB AES256-CFB AES256-OFB AES256	YES/NO	Algorithm uses fixed key size (32 bytes)
RC2-CBC RC2-ECB RC2-CFB RC2-OFB RC2	NO	16-byte key size supported
RC4-STREAM RC4	NO	16-byte key size supported

Value

FIPS MODE

Comments

DES-CBC
DES-ECB
DES-CFB
DES-OFB
DES

YES/NO

Algorithm uses fixed key size (8 bytes)

3DES-CBC
3DES-ECB
3DES-CFB
3DES-OFB
3DES

YES/NO

Algorithm uses fixed key size (24 bytes)

AES128-CBC
AES128-ECB
AES128-CFB
AES128-OFB
AES128

YES/NO

Algorithm uses fixed key size (16 bytes)

AES192-CBC
AES192-ECB
AES192-CFB
AES192-OFB
AES192

YES/NO

Algorithm uses fixed key size (24 bytes)

AES256-CBC
AES256-ECB
AES256-CFB
AES256-OFB
AES256

YES/NO

Algorithm uses fixed key size (32 bytes)

RC2-CBC
RC2-ECB
RC2-CFB
RC2-OFB
RC2

16-byte key size supported

RC4-STREAM
RC4

16-byte key size supported

Example:

lear_cipher=3DES-CBC

Notes:

This is one of a pair of parameters, as follows:
- lear_cipher (local)
- ear_cipher (remote)
CA XCOM Data Transport automatically sets checkpoint_count to 0 if any of the following parameter values are set:
- (l)ear_cipher=XXX-OFB
- (l)ear_cipher=RC4
- (l)ear_hash=XXX