Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 405137d1 authored by Joy Latten's avatar Joy Latten Committed by David S. Miller
Browse files

[IPSEC]: Add support for aes-ctr. 



The below patch allows IPsec to use CTR mode with AES encryption
algorithm. Tested this using setkey in ipsec-tools.

Signed-off-by: default avatarJoy Latten <latten@austin.ibm.com>
Acked-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 054b0e2b

include/linux/pfkeyv2.h

+1 −0
Original line number Diff line number Diff line
@@ -298,6 +298,7 @@ struct sadb_x_sec_ctx { 
#define SADB_X_EALG_BLOWFISHCBC		7

#define SADB_EALG_NULL			11

#define SADB_X_EALG_AESCBC		12

#define SADB_X_EALG_AESCTR		13

#define SADB_X_EALG_AES_CCM_ICV8	14

#define SADB_X_EALG_AES_CCM_ICV12	15

#define SADB_X_EALG_AES_CCM_ICV16	16

net/xfrm/xfrm_algo.c

+17 −0
Original line number Diff line number Diff line
@@ -399,6 +399,23 @@ static struct xfrm_algo_desc ealg_list[] = { 
		.sadb_alg_maxbits = 256

	}

},

{

	.name = "rfc3686(ctr(aes))",



	.uinfo = {

		.encr = {

			.blockbits = 128,

			.defkeybits = 160, /* 128-bit key + 32-bit nonce */

		}

	},



	.desc = {

		.sadb_alg_id = SADB_X_EALG_AESCTR,

		.sadb_alg_ivlen	= 8,

		.sadb_alg_minbits = 128,

		.sadb_alg_maxbits = 256

	}

},

};



static struct xfrm_algo_desc calg_list[] = {