[RFC v2 PATCH 0/9] Add IPsec extended (64-bit) sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 1/9] crypto: authencesn - Add algorithm to handle IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
Re: [RFC v2 PATCH 1/9] crypto: authencesn - Add algorithm to handle IPsec extended sequence numbers · Herbert Xu <herbert@gondor.apana.org.au> · 2011-03-13
Re: [RFC v2 PATCH 1/9] crypto: authencesn - Add algorithm to handle IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-14
Re: [RFC v2 PATCH 1/9] crypto: authencesn - Add algorithm to handle IPsec extended sequence numbers · Herbert Xu <herbert@gondor.apana.org.au> · 2011-03-14
Re: [RFC v2 PATCH 1/9] crypto: authencesn - Add algorithm to handle IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-14
[RFC v2 PATCH 2/9] xfrm: Add basic infrastructure to support IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
Re: [RFC v2 PATCH 2/9] xfrm: Add basic infrastructure to support IPsec extended sequence numbers · Herbert Xu <herbert@gondor.apana.org.au> · 2011-03-13
Re: [RFC v2 PATCH 2/9] xfrm: Add basic infrastructure to support IPsec extended sequence numbers · David Miller <davem@davemloft.net> · 2011-03-13
Re: [RFC v2 PATCH 2/9] xfrm: Add basic infrastructure to support IPsec extended sequence numbers · Herbert Xu <herbert@gondor.apana.org.au> · 2011-03-13
[RFC v2 PATCH 3/9] xfrm: Use separate low and high order bits of the sequence numbers in xfrm_skb_cb · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 4/9] esp4: Add support for IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 5/9] esp6: Add support for IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 6/9] xfrm: Move IPsec replay detection functions to a separate file · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 7/9] xfrm: Support anti-replay window size bigger than 32 packets · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 8/9] xfrm: Add support for IPsec extended sequence numbers · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC v2 PATCH 9/9] xfrm: Add user interface for esn and big anti-replay windows · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08
[RFC PATCH] iproute2: Add IPsec extended sequence number support · Steffen Klassert <steffen.klassert@secunet.com> · 2011-03-08

STALE5617d

[RFC v2 PATCH 0/9] Add IPsec extended (64-bit) sequence numbers

From: Steffen Klassert <steffen.klassert@secunet.com>
Date: 2011-03-08 10:04:07
Also in: netdev

This patchset adds support for IPsec extended (64-bit) sequence numbers for
esp as defined in RFC 4303. Also it adds support for anti-replay windows
bigger than 32 packets. To make use of big anti-replay windows and extended
sequence numbers, new userspace tools are needed. An example patch for
iproute2 is provided with this patchset.

Known issues:

-  Not tested against another implementation of IPsec extended
   sequence numbers.

Changes from v1:

-  Use a SG list with three 4 byte entries for the associated data.

-  Fix the sequence number to be in network byte order when using AEAD
   algorithms.

-  Rebased to net-next-2.6 current.

The patchset is also available at branch 'net-next-esn' of

git://git.kernel.org/pub/scm/linux/kernel/git/klassert/linux-2.6-stk.git

Steffen