| Function | Layer | Implementation |
|---|---|---|
| Establish trust |
DNS SEC pre-shared secret key pre-shared public key |
BIND 8.2+(soon) ASCII string RSA key |
| Set up keys |
manual IKE(ISAKMP/OAKLEY) Photuris |
hexadecimal string FreeS/WAN Pluto (userspace) none (yet) |
| Protect information | IPSEC | FreeS/WAN KLIPS (kernel) |