[PATCH net-next] xfrm: add ARIA CBC and CTR support
From: Hong In-su <hidden>
Date: 2026-09-09 05:59:19
Also in:
lkml
Subsystem:
networking [general], networking [ipsec], the rest · Maintainers:
"David S. Miller", Eric Dumazet, Jakub Kicinski, Paolo Abeni, Steffen Klassert, Herbert Xu, Linus Torvalds
The kernel crypto API already provides ARIA implementations, but XFRM does not have algorithm descriptors for them. Consequently, ARIA cannot be selected for ESP through XFRM. Add XFRM algorithm descriptors for CBC and RFC3686 CTR modes using the existing cbc(aria) and rfc3686(ctr(aria)) crypto algorithms. The CBC and CTR modes have been tested with IPsec using strongSwan. Signed-off-by: Hong In-su <redacted> --- net/xfrm/xfrm_algo.c | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+)
diff --git a/net/xfrm/xfrm_algo.c b/net/xfrm/xfrm_algo.c
index 70434495f23f..16c70dc1a426 100644
--- a/net/xfrm/xfrm_algo.c
+++ b/net/xfrm/xfrm_algo.c@@ -512,6 +512,34 @@ static struct xfrm_algo_desc ealg_list[] = { .sadb_alg_maxbits = 256 } }, +{ + .name = "cbc(aria)", + .compat = "aria", + + .uinfo = { + .encr = { + .geniv = "echainiv", + .blockbits = 128, + .defkeybits = 256, + } + }, + + .pfkey_supported = 0, +}, +{ + .name = "rfc3686(ctr(aria))", + .compat = "aria", + + .uinfo = { + .encr = { + .geniv = "seqiv", + .blockbits = 128, + .defkeybits = 160, + } + }, + + .pfkey_supported = 0, +}, { .name = "cbc(twofish)", .compat = "twofish",
--
2.43.0