On Wed, Feb 20, 2008 at 01:33:22PM +0100, Patrick McHardy wrote:
I saw the discrepancy between the elen value used
for aead_request_set_crypt() in esp_input() and the
req->nbytes value seen in hifn_setup_session().
OK that is normal. esp_input is now using the AEAD interface
so the size for the request includes the ICV. By the time the
request gets to hifn it no longer has the ICV so it would be
12 bytes elss.
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt