Hi:

It appears that your implementation of ghash is buggy:

https://bugzilla.redhat.com/show_bug.cgi?id=1207598

The gist of the report is that using s390 ghash causes IPsec
to fail when the other side is x86_64.  Using the generic ghash
code on the s390 side fixes it.

Please look into this.

Thanks,
-- 
Email: Herbert Xu [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt