Encryption algorithms
RouterOS ESP поддерживает различные алгоритмы шифрования и аутентификации.
Аутентификация:
- MD5
- SHA1
- SHA2 (256-bit, 512-bit)
Шифрование:
- AES — 128-bit, 192-bit and 256-bit key AES-CBC, AES-CTR and AES-GCM algorithms;
- Blowfish — added since v4.5
- Twofish — added since v4.5
- Camellia — 128-bit, 192-bit and 256-bit key Camellia encryption algorithm added since v4.5
- DES — 56-bit DES-CBC encryption algorithm;
- 3DES — 168-bit DES encryption algorithm;
Аппаратное ускорение
Аппаратная поддержка шифрования позволяет увеличить максимальную скорость во время процесса зашифровывания и расшифровывания передаваемых данных за счет использования специального со-процессора, который отвечает только за эту задачу.
Hardware acceleration allows doing a faster encryption process by using a built-in encryption engine inside the CPU.
| RouterBoard | DES and 3DES | AES-CBC | AES-CTR | AES-GCM | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MD5 | SHA1 | SHA256 | SHA512 | MD5 | SHA1 | SHA256 | SHA512 | MD5 | SHA1 | SHA256 | SHA512 | MD5 | SHA1 | SHA256 | SHA512 | |
| RBcAPGi-5acD2nD (cAP ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBD23UGS-5HPacD2HnD-NM (NetMetal ac²) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBD25G-5HPacQD2HPnD (Audience) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBD25GR-5HPacQD2HPnD&R11e-LTE6 (Audience LTE6 kit) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBD52G-5HacD2HnD (hAP ac2) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBDiscG-5acD (DISC Lite5 ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBLDFG-5acD (LDF 5 ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBLHGG-5acD (LHG 5 ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBLHGG-5HPacD2HPnD-XL (LHG XL 52 ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBLHGG-5acD-XL (LHG XL 5 ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBLHGG-60ad (Wireless Wire Dish) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBLtAP-2HnD (LtAP) | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RBLtAP-2HnD&R11e-LTE (LtAP LTE kit) | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RBLtAP-2HnD&R11e-4G (LtAP 4G kit) | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RBLtAP-2HnD&R11e-LTE6 (LtAP LTE6 kit) | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RBM11G | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RBM33G | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RBSXTsqG-5acD (SXTsq 5 ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBwAPG-60ad (wAP 60G) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBwAPG-60ad-A (wAP 60G AP) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBwAPGR-5HacD2HnD (wAP R ac) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBwAPGR-5HacD2HnD&R11e-LTE (wAP ac LTE kit) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBwAPGR-5HacD2HnD&R11e-4G (wAP ac 4G kit) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RBwAPGR-5HacD2HnD&R11e-LTE6 (wAP ac LTE6 kit) | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RB450Gx4 | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RB750Gr3 (hEX) | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RB760iGS (hEX S) | yes**** | yes**** | yes**** | no | yes | yes | yes | no | no | no | no | no | no | no | no | no |
| RB850Gx2 | no | no | no | no | yes** | yes** | yes** | yes** | no | no | no | no | no | no | no | no |
| RB1100AHx2 | yes | yes | yes | no | yes | yes | yes | yes | no | no | no | no | no | no | no | no |
| RB1100AHx4 and RB1100AHx4 Dude Edition | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
| RB1200 | no | no | no | no | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | no | no | no | no |
| RB3011UiAS-RM | no | yes | yes | no | no | yes* | yes* | no | no | yes* | yes* | no | no | no | no | no |
| RB4011iGS+RM and RB4011iGS+5HacQ2HnD-IN | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes | yes |
| Cloud Core Router series | yes | yes | yes | no | yes | yes | yes | no | yes | yes | yes | no | no | no | no | no |
| x86 (AES-NI) | no | no | no | no | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** | yes*** |
* supported only 128 bit and 256 bit key sizes
** only manufactured since 2016, serial numbers that begin with number 5 and 7
*** AES-CBC and AES-CTR only encryption is accelerated, hashing done in software
**** DES is not supported, only 3DES and AES-CBC