https://bugs.linaro.org/show_bug.cgi?id=4018

--- Comment #3 from Janne Peltonen <janne.pelto...@nokia.com> ---
I am referring to all IPsec output tests. The test cases compare the output
packet produced by the IPsec implementation against the expected output packet
defined in the test vector. The packets match only if the IPsec implementation
chooses the same IV that is in the test vector as otherwise the encrypted bytes
are totally different.

You can see which test cases could fail with other implementations by changing
the IV generation a little, like this, and running make check:

--- a/platform/linux-generic/odp_ipsec.c
+++ b/platform/linux-generic/odp_ipsec.c
@@ -1032,6 +1032,7 @@ static int ipsec_out_iv(ipsec_state_t *state,
                        return -1;
        }

+       state->iv[0] += 1;
        return 0;
 }

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to