IPsec is a suite of protocols for securing IP communications by authenticating and encrypting each packet of a communication session. There are also protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session.

"Since we had the first IPSEC stack available for free, large parts of the code are now found in many other projects/products. Over 10 years, the IPSEC code has gone through many changes and fixes, so it is unclear what the true impact of these allegations are," De Raadt wrote.





[link to www.itwire.com]