https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202091
Bug ID: 202091
Summary: IPsec aes-gcm does not support ICV8 or ICV12
Product: Base System
Version: 11.0-CURRENT
Hardware: Any
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
setkey does not support ICV8 or ICV12.
With the recent changes I made, I know the kernel support ICV16, but it will
break if ICV8 or ICV12 is used. This could be panics or corrupted packets.
Test and verify that ICV8 and ICV12 cannot be set in the kernel on an SA, or
fix them, though this may be harder to do.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"