]> git.baikalelectronics.ru Git - kernel.git/commit
Revert "crypto: talitos - add IPsec ESN support"
authorHoria Geanta <horia.geanta@freescale.com>
Wed, 20 Mar 2013 14:31:38 +0000 (16:31 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Thu, 21 Mar 2013 09:36:02 +0000 (17:36 +0800)
commite0dc31af02e406329972c5a6295bdf0c187081a4
tree863e0347cbfae5294fda07f02ece153cef4b3b70
parent2811586edf3edf6d06324735d0c8a05235a6937b
Revert "crypto: talitos - add IPsec ESN support"

This reverts commit dc5d0df8e94f371f87c5eaa9756773377a980bd4.

Current IPsec ESN implementation for authencesn(cbc(aes), hmac(sha))
(separate encryption and integrity algorithms) does not conform
to RFC4303.

ICV is generated by hashing the sequence
SPI, SeqNum-High, SeqNum-Low, IV, Payload
instead of
SPI, SeqNum-Low, IV, Payload, SeqNum-High.

Cc: <stable@vger.kernel.org> # 3.8, 3.7
Reported-by: Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com>
Signed-off-by: Horia Geanta <horia.geanta@freescale.com>
Reviewed-by: Kim Phillips <kim.phillips@freescale.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
drivers/crypto/talitos.c