Some improvements towards the implementation mechanism of FreeS/WAN
Zhao Bi · Journal of Xi'an University of Post and Telecommunications · 2009
This paper first presents the disadvantages of current IPsec standards,then analyzes the implementation mechanism of open source project——FreeS/WAN.Based on such analysis,this paper proposes some improvements towards FreeS/WAN,designs and implements an application-aware IPsec prototype,aiming at promoting end-to-end secrecy of IPsec and making proper use of the existing security connections.At last,the results of experiments indicate that such improvements are of high feasibility to promote end-to-end secrecy at the cost of minor decrease of performance.