Add support for AES in OCB mode about strongswan HOT 2 CLOSED

The use of AES in OCB mode is not standardized for use with IKEv2 or IPsec. There is a draft from 2001, probably abandoned due to the patent at the time. There was a discussion on the ipsecme working group mailing list earlier this year, with no clear consensus. So far it hasn't been added to the WG charter and there were also no independent draft submissions (I guess the advantages over the widely adopted GCM mode aren't significant enough to gain much traction). So it will probably be a while until anything happens in this regard (if at all).

from strongswan.

Yeah okay, fair. I am going to close this and wait to see if something about this topic will come up again in the IKEv2 / IPsec space since this topic is gaining some attention by the TLS people, thanks!

from strongswan.