The SHA96 handshake is not recommended for use in an IPSec (IKEv2) VPN with AES-128 GCM encryption.
The SHA96 handshake is not recommended for use in an IPSec (IKEv2) VPN with AES-128 GCM encryption.
It varies but generally SHA-256 offers solid protection. But remember, SHA is only one aspect of cryptocurrency security. Strong data integrity doesn't guarantee good confidentiality. It all hinges on the setup. It's similar to asking if cars were reliable in 2021—it depends on the specific model. I’d suggest focusing on configuring IKEv2 and IPSec to match your requirements. If you need a tunnel between offices and one uses only MD5 for integrity, MD5 might suffice for that traffic. It could be cost-effective for protecting sensitive files like cat pictures during transit. Ultimately, it depends on your environment, constraints, and goals. WireGuard looks promising but is still emerging. If easy migration is possible, it could be worth considering. For organizations with many users and existing OpenVPN setups, a switch might not be necessary right now. The decision always comes down to your unique situation.