]> git.baikalelectronics.ru Git - kernel.git/commit
[IPSEC]: Add support for combined mode algorithms
authorHerbert Xu <herbert@gondor.apana.org.au>
Tue, 29 Jan 2008 03:37:29 +0000 (19:37 -0800)
committerDavid S. Miller <davem@davemloft.net>
Fri, 1 Feb 2008 03:27:03 +0000 (19:27 -0800)
commite98f656bbdfed8f7eebc840d298c974fea18b4e6
treeafe5c560388558bebd3e21b7c6f789a28a323a51
parent919f41d25b544b243cf1bb5237f52b2d4861a75f
[IPSEC]: Add support for combined mode algorithms

This patch adds support for combined mode algorithms with GCM being
the first algorithm supported.

Combined mode algorithms can be added through the xfrm_user interface
using the new algorithm payload type XFRMA_ALG_AEAD.  Each algorithms
is identified by its name and the ICV length.

For the purposes of matching algorithms in xfrm_tmpl structures,
combined mode algorithms occupy the same name space as encryption
algorithms.  This is in line with how they are negotiated using IKE.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/pfkeyv2.h
include/linux/xfrm.h
include/net/xfrm.h
net/ipv4/esp4.c
net/ipv6/esp6.c
net/xfrm/xfrm_algo.c
net/xfrm/xfrm_user.c