Date: Tue, 04 Aug 2015 20:03:51 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 202091] IPsec aes-gcm does not support ICV8 or ICV12 Message-ID: <bug-202091-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202091 Bug ID: 202091 Summary: IPsec aes-gcm does not support ICV8 or ICV12 Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: jmg@FreeBSD.org setkey does not support ICV8 or ICV12. With the recent changes I made, I know the kernel support ICV16, but it will break if ICV8 or ICV12 is used. This could be panics or corrupted packets. Test and verify that ICV8 and ICV12 cannot be set in the kernel on an SA, or fix them, though this may be harder to do. -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-202091-8>