lkml.org 
[lkml]   [2006]   [Jul]   [11]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
FromHerbert Xu <>
SubjectRe: [ACRYPTO] new release of asynchronous crrypto layer.
DateTue, 11 Jul 2006 14:55:36 +1000
Hi Evgeniy:

Evgeniy Polyakov <johnpol@2ka.mipt.ru> wrote:
>
> * IPsec ESP4 port to acrypto

I noticed a bug in the ESP IV processing.  When you do ESP asynchronously,
you can no longer use the last block of the previous packet as the IV of
the next.  This is because the next packet may have started processing
before the last packet has even been finalised.

A simple solution is to generate a random IV.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/
\
 
 \ /
  Last update: 2006-07-11 04:59    [W:0.450 / U:0.020 seconds]
©2003-2008 Jasper Spaans