I have a question about the options for
auth. I'm using Openvpn 2.3.11 with OpenSSL 1.0.2h.
The digests list I am given is:
MD5 128 bit digest size
RSA-MD5 128 bit digest size
SHA 160 bit digest size
RSA-SHA 160 bit digest size
SHA1 160 bit digest size
RSA-SHA1 160 bit digest size
DSA-SHA 160 bit digest size
DSA-SHA1-old 160 bit digest size
DSA-SHA1 160 bit digest size
RSA-SHA1-2 160 bit digest size
DSA 160 bit digest size
RIPEMD160 160 bit digest size
RSA-RIPEMD160 160 bit digest size
MD4 128 bit digest size
RSA-MD4 128 bit digest size
ecdsa-with-SHA1 160 bit digest size
RSA-SHA256 256 bit digest size
RSA-SHA384 384 bit digest size
RSA-SHA512 512 bit digest size
RSA-SHA224 224 bit digest size
SHA256 256 bit digest size
SHA384 384 bit digest size
SHA512 512 bit digest size
SHA224 224 bit digest size
whirlpool 512 bit digest size
Now my question is what the actual difference is between options like
RSA-SHA512 and
SHA512?
If I use
SHA512, does that mean no encryption is used for the message authentication, only the hash sum? So no hash, then encrypt?
From what I know it's very common to
only use the a hashing algorithm for the
auth option. What difference does the
RSA or
DSA make there?
edit: Also, how should I interpret the DSA in this list?