Date: Sun, 24 Jun 2012 12:50:10 GMT From: Patrick Lamaiziere <patfbsd@davenulle.org> To: freebsd-bugs@FreeBSD.org Subject: Re: kern/166508: [glxsb] AES 256 encryption does not work with glxsb driver Message-ID: <201206241250.q5OCoA8n017224@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/166508; it has been noted by GNATS.
From: Patrick Lamaiziere <patfbsd@davenulle.org>
To: bug-followup@FreeBSD.org, todd@toddblum.org
Cc:
Subject: Re: kern/166508: [glxsb] AES 256 encryption does not work with
glxsb driver
Date: Sun, 24 Jun 2012 14:33:52 +0200
Hello,
This is a known issue and a problem within the crypto(9) framework. In
the crypto framework we can only specify the algorithm (here aes) to
use but not the size of the key. As glxsb only does aes-128, it fails
when the crypto framework opens a session on it if the key size if
different than 128.
There is a CAVEAT section in the manual page of glxsb(4) for this :
CAVEAT
The crypto(9) framework will fail to open the crypto session on the
device if the AES key's length is != 128 bits. This prevents the
use of the glxsb device driver with AES keys of length != 128 bits.
To make this to work, it need some changes in crypto(9). Sorry.
(we can close this PR I guess, as it will not be solved)
Regards.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201206241250.q5OCoA8n017224>