[PATCH] xfrm: Apply fix for key lengths for rfc3686(ctr(aes)) to 2.6.32.y
flat view
DORMANTno replies
From: Calvin Owens <hidden>
Date: 2011-12-09 20:29:11
Also in:
lkml, stable
Subsystem:
networking [general], networking [ipsec], the rest · Maintainers:
"David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Steffen Klassert, Herbert Xu, Linus Torvalds
This fix was applied to 3.0.3, but was not applied to the earlier series. Several
widely-used distros base (or based) their kernels on this series, so the problem
hasn't been fixed for them. The patch below is against 2.6.32.49.
Original commit was 4203223a1aed862b4445fdcd260d6139603a51d9
Signed-off-by: Calvin Owens <redacted>
---
net/xfrm/xfrm_algo.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/net/xfrm/xfrm_algo.c b/net/xfrm/xfrm_algo.c
index faf54c6..9bd850a 100644
--- a/net/xfrm/xfrm_algo.c
+++ b/net/xfrm/xfrm_algo.c@@ -411,8 +411,8 @@ static struct xfrm_algo_desc ealg_list[] = { .desc = { .sadb_alg_id = SADB_X_EALG_AESCTR, .sadb_alg_ivlen = 8, - .sadb_alg_minbits = 128, - .sadb_alg_maxbits = 256 + .sadb_alg_minbits = 160, + .sadb_alg_maxbits = 288 } }, };
--
1.7.4.1