On Fri, Sep 19, 2008 at 12:33:36AM +0200, Lukas Ratajski wrote: > IPsec tunnel between two computers - a Soekris net5501 running > [...] > key_encrypt: bits 256:
The crypto driver for the net5501 does not support 256bit AES.
you have to switch to 128bit AES keys or backport revision 1.15
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/pci/glxsb.c
(and replace M_ZERO with a call to bzero()).
-m
