libstrongswan-extra-plugins - 6.0.1-6+deb13u1 main

The strongSwan VPN suite uses the native IPsec stack in the standard
Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
.
This package provides extra plugins for the strongSwan utility and
cryptographic library.
.
Included plugins are:
- aes (AES-128/192/256 cipher software implementation)
- af-alg [linux] (AF_ALG Linux crypto API interface, provides
ciphers/hashers/hmac/xcbc)
- ccm (CCM cipher mode wrapper)
- cmac (CMAC cipher mode wrapper)
- ctr (CTR cipher mode wrapper)
- curl (libcurl based HTTP/FTP fetcher)
- curve25519 (support for Diffie-Hellman group 31 using Curve25519 and
support for the Ed25519 digital signature algorithm for IKEv2)
- fips-prf (PRF specified by FIPS, used by EAP-SIM/AKA algorithms)
- gcrypt (Crypto backend based on libgcrypt, provides
RSA/DH/ciphers/hashers/rng)
- gmp (RSA/DH crypto backend based on libgmp)
- hmac (HMAC wrapper using various hashers)
- ldap (LDAP fetching plugin based on libldap)
- md5 (MD5 hasher software implementation)
- mgf1 (Mask Generation Functions based on the SHA-1, SHA-256 and SHA-512)
- padlock (VIA padlock crypto backend, provides AES128/SHA1)
- pgp (PGP encoding/decoding routines)
- pkcs11 (PKCS#11 smartcard backend)
- pkcs12 (PKCS#12 decoding routines)
- rc2 (RC2 cipher software implementation)
- rdrand (High quality / high performance random source using the Intel
rdrand instruction found on Ivy Bridge processors)
- sha1 (SHA1 hasher software implementation)
- sha2 (SHA256/SHA384/SHA512 hasher software implementation)
- test-vectors (Set of test vectors for various algorithms)
- xcbc (XCBC wrapper using various ciphers)
.
Also included is the libtpmtss library adding support for TPM plugin
(https://wiki.strongswan.org/projects/strongswan/wiki/TpmPlugin)