strongSwan has support for the GCM (http://en.wikipedia.org/wiki/Galois/Counter_Mode) mode of operation for AES but requires a configuration option to compile the plugin. I spent quite a while attempting to troubleshoot connectivity problems with a Ubuntu 12.04.3 server only to find that my Gentoo box was lacking this gcm plugin. Reproducible: Always The configuration option for strongSwan is "--enable-gcm"
It looks like net-libs/cyassl has a USE aes-gcm option already. I'm not sure if GCM is necessarily limited to only AES but, for strongSwan, all GCM options are for AES. Instead of USE=gcm, you could use USE=aes-gcm.
Fixed in 5.2.0-r1 , the use-flag is called "strongswan_plugins_gcm"