Re: IPSec hmac(sha256) truncation bits length

+ CC net, James Morris

On Wed, Mar 4, 2015 at 7:13 PM, Nicolae Rosia [off-list ref] wrote:

Hello,

I'm trying to understand why icv_truncbits is set to 96 for
hmac(sha256) in xfrm_algo.c because
RFC4868 [1] says that the truncation length for HMAC-SHA256 should be 128.
Am I looking in the wrong place?

[1] https://tools.ietf.org/html/rfc4868#section-2.6

Best regards,
Nicolae Rosia