Serrip
While having researched a fair bit from scratch about security, networking, VPN and encryption. Of course, a few of weeks of clicks isn't going to be enough to digest it all (and retain it) but never the less I set myself a goal of understanding the following:
"Encryption with 2048-bit RSA certificates, DHE-RSA-AES256-SHA for exchange of OpenVPN key material (OpenVPN does not use the TLS data channel for the IP tunnel) and AES-256-CBC-SHA for the OpenVPN data channel"
This is how I understand it:
"Encryption with 2048-bit RSA certificates"
A 2048-bit public key [algorithm] is used to authenticate a connection, this is where a users credentials are sent to the server (command channel).
"DHE-RSA-AES256-SHA for exchange of OpenVPN key"
???
"OpenVPN does not use the TLS data channel for the IP tunnel"
Based on SSL OpenVPN traffic data is secured by this protocol and not TLS.
"AES-256-CBC-SHA for the OpenVPN data channel"
The VPN tunnel used to shuttle your internet data is a 256-bit AES symmetric cryptography one, which is faster than the initial public key handshake (asymmetric).
Naturally I have made mistakes, if anybody could point these out that would be great help!
Thanks in advance
