rsa encryption-padding

Function

The rsa encryption-padding command configures a padding mode for RSA encryption.

The undo rsa encryption-padding command restores the default padding mode for RSA encryption.

By default, the padding mode of RSA encryption is OAEP.

Format

rsa encryption-padding { oaep | pkcs1 }

undo rsa encryption-padding

Parameters

Parameter	Description	Value
oaep	Set the padding mode of RSA encryption to Optimal Asymmetric Encryption Padding (OAEP).	-
pkcs1	Sets the padding mode of RSA encryption to Public-Key Cryptography Standards 1 (PKCS1).	-

Views

IKE peer view

Default Level

2: Configuration level

Usage Guidelines

On an IPSec-enabled network, identity authentication can be performed using an RSA digital envelope. When the padding mode of RSA encryption is set to PKCS1, there are security risks. To improve network security, run the rsa encryption-padding command to set the padding mode of RSA encryption to OAEP.

Example

# Set the padding mode of RSA encryption to OAEP.

<sysname> system-view
[sysname] ike peer peer1
[sysname-ike-peer-peer1] rsa encryption-padding oaep