Messages in this thread |  | | | Date | Fri, 09 Mar 2012 08:41:10 -0500 | | From | Jarod Wilson <> | | Subject | Re: [PATCH] xfrm: fix hmac(sha256) truncation length |
| |
Herbert Xu wrote: > On Wed, Mar 07, 2012 at 03:12:37PM -0500, Jarod Wilson wrote: >> Commit bc74b0c8af17458ecae77f725e507ab5fd100105 added proper hmac sha384 >> and sha512 variants with truncation lengths of 192 and 256 respectively, >> per RFC4868: > > No, it was done deliberately to maintain backwards compatibility. > Userspace should set the truncbits explicitly from now on.
Okay, I suspected that might be the case. No plans to ever invert that, so that userspace has to explicitly set the shorter truncbits for backwards compat?
-- Jarod Wilson jarod@redhat.com.
|  |