[PATCH] xfrm: Apply fix for key lengths for rfc3686(ctr(aes)) to 2.6.32.y
From: Calvin Owens <hidden>
Date: 2011-12-09 20:29:11
Also in:
lkml, stable
Subsystem:
networking [general], networking [ipsec], the rest · Maintainers:
"David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Steffen Klassert, Herbert Xu, Linus Torvalds
This fix was applied to 3.0.3, but was not applied to the earlier series. Several widely-used distros base (or based) their kernels on this series, so the problem hasn't been fixed for them. The patch below is against 2.6.32.49. Original commit was 4203223a1aed862b4445fdcd260d6139603a51d9 Signed-off-by: Calvin Owens <redacted> --- net/xfrm/xfrm_algo.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/net/xfrm/xfrm_algo.c b/net/xfrm/xfrm_algo.c
index faf54c6..9bd850a 100644
--- a/net/xfrm/xfrm_algo.c
+++ b/net/xfrm/xfrm_algo.c@@ -411,8 +411,8 @@ static struct xfrm_algo_desc ealg_list[] = { .desc = { .sadb_alg_id = SADB_X_EALG_AESCTR, .sadb_alg_ivlen = 8, - .sadb_alg_minbits = 128, - .sadb_alg_maxbits = 256 + .sadb_alg_minbits = 160, + .sadb_alg_maxbits = 288 } }, };
--
1.7.4.1