On Mon, 20 Aug 2012 11:32:12 +0300, Herbert Xu [off-list ref] wrote:
On Wed, Aug 08, 2012 at 08:22:15PM -0500, Kim Phillips wrote:
quoted
On Wed, 8 Aug 2012 18:46:45 +0300
Horia Geanta [off-list ref] wrote:
quoted
Support for ESNs (extended sequence numbers).
Tested with strongswan on a P2020RDB back-to-back setup.
Extracted from /etc/ipsec.conf:
esp=aes-sha1-esn-modp4096!
Signed-off-by: Horia Geanta <redacted>
---
series:
Reviewed-by: Kim Phillips <redacted>
Patch applied. Thanks!
What about patches [1-4]/5 ?
http://www.mail-archive.com/linux-crypto@vger.kernel.org/msg07507.html
Patch 5/5 won't work without these.
4/5 adds "support for handling non-contiguous assoc data and iv", which is
exactly how native IPsec submits SPI + ESN to talitos.
Horia