| commit | 1a6509d991225ad210de54c63314fd9542922095 | |
| author | Herbert Xu <herbert@gondor.apana.org.au> | |
| Tue, 29 Jan 2008 03:37:29 +0000 (28 19:37 -0800) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Fri, 1 Feb 2008 03:27:03 +0000 (31 19:27 -0800) | ||
| tree | afe5c560388558bebd3e21b7c6f789a28a323a51 | treesnapshot (tar.gz zip) |
| parent | 6fbf2cb77461a0cd0675228d20dd0f70d7b2251f | commitdiff |
[IPSEC]: Add support for combined mode algorithms
This patch adds support for combined mode algorithms with GCM being
the first algorithm supported.
Combined mode algorithms can be added through the xfrm_user interface
using the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms
is identified by its name and the ICV length.
For the purposes of matching algorithms in xfrm_tmpl structures,
combined mode algorithms occupy the same name space as encryption
algorithms. This is in line with how they are negotiated using IKE.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
This patch adds support for combined mode algorithms with GCM being
the first algorithm supported.
Combined mode algorithms can be added through the xfrm_user interface
using the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms
is identified by its name and the ICV length.
For the purposes of matching algorithms in xfrm_tmpl structures,
combined mode algorithms occupy the same name space as encryption
algorithms. This is in line with how they are negotiated using IKE.
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>