How do I make IKEv2 use ChaCha20Poly1305 in Configuration Profile?

Hi


It seems iOS 13 added the support for ChaCha20Poly1305 as encryption algorithm, yet the Configuration Profile Reference doesn't say what value to enable it. I tried both "CHACHA-20-POLY-1305" and "CHACHA20-POLY1305", both didn't get recgonized, and fell back to 3DES.


Strangely diffie hellman group 31 did get recognized.


What value should I use to enable it?

The reference parts of the Configuration Profile Reference have largely been obsoleted by Document > Device Management > Profile-Specific Payload Keys. There you’ll find the latest info (here and here) for configuring SA encryption, including ChaCha20 / Poly1305.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"
How do I make IKEv2 use ChaCha20Poly1305 in Configuration Profile?
 
 
Q