Suite B cryptographic suites

Suite B is a set of cryptographic algorithms designated by the U.S. National Security Agency to allow commercial products to protect traffic that is classified at secret or top secret levels. Suite B protocols are defined in RFC 6379, Suite B Cryptographic Suites for IPsec. The Suite B cryptographic suites provide Encapsulating Security Payload (ESP) integrity and confidentiality and should be used when ESP integrity protection and encryption are both required. The following Suite B cryptographic suites are supported: 

• Suite-B-GCM-128 
• ESP: Advanced Encryption Standard (AES) encryption with 128-bit keys and 16-octet integrity check value (ICV) in Galois/Counter Mode (GCM). 
• IKE: AES encryption with 128-bit keys in cipher block chaining (CBC) mode, integrity using SHA-256 authentication, and key establishment using Diffie-Hellman (DH) group 19 and authentication using Elliptic Curve Digital Signature Algorithm (ECDSA) 256-bit elliptic curve signatures. 
• Suite-B-GCM-256 
• ESP: AES encryption with 256-bit keys and 16-octet ICV in GCM for ESP. 
• IKE: AES encryption with 256-bit keys in CBC mode, integrity using SHA-384 authentication, and key establishment using DH group 20 and authentication using ECDSA 384-bit elliptic curve signatures.