Free dh software for windows

The OpenHIP package was designed to be a free, open-source implementation of the Host Identity Protocol (HIP).HIP is being developed within the Internet Engineering Task Force (IETF) and the Internet Research Task Force (IRTF) to study and experiment with HIP and related protocols.
HIP is a specific proposal to decouple network identity from network location in the Internet protocol stack. Historically, IP addresses have served both functions. This dual use of IP addresses is becoming problematic, and there have been many research efforts aimed at studying the decoupling of identifier and locator in the network stack. HIP is a specific proposal that uses public/private key pairs as the host identifiers.

Enhancements:
- fix LSI DHT lookups for Windows
- dont ask for random number seed from Windows installer
- save identities files upon exit in Windows
- more consistently apply if_index
- fix handle_local_address_changes() to use preferred (fix Windows multihoming)
- suppress generating multiple ACQUIREs from userspace
- upon receiving I2 with existing association, delete the old prior to adding new
- remove association after rekey failed so we dont end up out of sync
- reduce reference count of DH in rekey structure when freeing
- consolodate rekey structure creation, check keymat length
- remove XML I/O warnings
- fix checking sendto() return value in hip_send()
- updated QOUT logging text
- fix segfault in handle_local_address_change()
- reduce logging of ACQUIRE messages
- during ACQUIRE, lookup associations using HITs if not opportunistic
- by default generate an LSI based on the HIT in hitgen
- fix segfault in find_hip_association3()
- clear the multicast bit in random mac address spoofed in userspace
- clear retransmissions following failed rekey
- only initiate readdress in ESTABLISHED state
- fixed hip_sadb_add_dst_entry() (unsupported encryption transform) bug
- send INT signal to all children upon exit
- DHT bind() to preferred address before connecting
- turn off extra DHT lookup during packet retransmission
- prevent I1 sending to an LSI
- fix CLOSE_ACK segfault
- added RAW_IP_OUT option for usermode ESP
- spin on g_state instead of prthread_join()ing all threads
- garbage collect zombie processes
- hitgen -publish now saves to hostname_host_identieis.pub.xml
- added "preferred_interface", "save_known_identities" options
- fixed DH cache ref count problem
- configuration file handling and pathnames
- ORCHID prefix to RFC4843
- fixed bug where association is closed following rekey
- fixed bug where association may be prematurely closed by check_last_used
- fixed several memory leaks and overflows, incorrect PID in lock file
- thread locking for usermode SADB
- fixed IPv6 ESP bug (when SPI=0x4...)
- compile hipstatus program by default
- made RVS code work from UMH

The Shrew Soft VPN Client is a free IPSEC Client for Windows 2000 and Windows XP. It can be used for communicating with a Open Source Operating system running ipsec-tools to provide an alternative to expensive commercial VPN solutions.
While this software does include advanced features such as Split Tunneling, Split DNS, Nat Traversal, IKE Fragmentation, Packet Pre Fragmentation, Dead Peer Detection, Hybrid XAuth and automatic client configuration, it is still missing some options that are available in the more popular commercial products.
For example, if your remote access needs include support for VPN enabled domain login or stateful client side firewall, this software may not be a good fit for your environment.
Main features:
Firewall Traversal Options
? NAT Traversal ( RFC & Draft 00-04 versions )
? NAT Keep Alive
? IKE Fragmentation

Authentications Methods
? Hybrid RSA + XAuth
? Mutual RSA + XAuth
? Mutual PSK + XAuth
? Mutual RSA
? Mutual PSK

Identification Types
? ASN1DN
? FQDN
? UFQDN
? Address
? Key Identifier

Exchange Modes
? Main
? Aggressive
? Configuration ( push or pull )
? Quick
? Informational

Phase1 Ciphers
? AES
? Blowfish
? 3DES
? CAST
? DES

Phase1 Hash Algorithms
? MD5
? SHA1

Phase2 Transforms
? ESP-AES
? ESP-Blowfish
? ESP-3DES
? ESP-CAST
? ESP-DES

Phase2 HMAC Algorithms
? HMAC-MD5
? HMAC-SHA1

Phase2 Options
? PFS is supported
? Tunnel mode is supported
? Transport mode is not supported
? Compression is not supported

Basic Configuration Exchange Attributes
? Banner
? Address
? Netmask
? WINS Server
? DNS Server

Advanced Configuration Exchange Attributes
? DNS Default Domain
? Login Banner
? Split Network Include List
? Split Network Exclude List
? Split DNS Domain List
? PFS DH Group

System requirements:
- Latest Service Packs Installed.

Enhancements:
- Update the NSIS installer scripts and inf files to allow for XP 64bit installs.
- Also add builds for a AMD64 version of the virtual network driver.
- This platform support still isnt complete due to class installer issues.