Release and vulnerability announcements for strongSwan

strongSwan 5.9.3 Released

We are happy to announce the release of strongSwan 5.9.3, which supports IKE encryption via TKM, adds more algorithms to the wolfssl plugin and brings several other new features and fixes.

IKE Encryption via TKM

The Trusted Key Manager (TKM) and strongSwan's corresponding IKE daemon charon-tkm gained support to encrypt IKE messages. That way, the IKE daemon won't see any key material at all.

More Algorithms for the wolfssl Plugin

By adding support for AES-ECB, SHA-3 and SHAKE-256 even more other plugins can be disabled when relying on wolfSSL as cryptographic backend.

Other Notable Features and Fixes

Download Complete Changelog