Messages in this thread | | | Date | Sat, 10 Mar 2012 00:45:42 +1100 | From | Herbert Xu <> | Subject | Re: [PATCH] xfrm: fix hmac(sha256) truncation length |
| |
On Fri, Mar 09, 2012 at 08:41:10AM -0500, Jarod Wilson wrote: > > Okay, I suspected that might be the case. No plans to ever invert that, > so that userspace has to explicitly set the shorter truncbits for > backwards compat?
That's up to the userspace implementation. If its configuration allows explicit trunc bits then just use whatever the user says. Otherwise it'll have to make a policy decision. For example, a big warning when upgrading and changing the default to the correct value.
Cheers, -- Email: Herbert Xu <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
| |