On Tue, Jan 17, 2006 at 09:10:55PM +1100, Herbert Xu ([EMAIL PROTECTED]) wrote:
> That's fine.  Because the parsing of such unknown strings occur in
> userspace we get to make up whatever rules you want.
> 
> However, in this case it's pretty simple.  CBC only accepts "base"
> cipher algorithms.  While "aes" is a base algorithm, "cbc(aes)" is
> not a "base" cipher algorithm.  Therefore this expression is invalid.
> So is the expression "cbc(md5)".

Ok, I see.
If user requests new string, anything he likes, it is compared with some
base set of strings algorithm supports, if it differs, then userspace
daemon will take care about all parsing and needed initialisation of
the requested crypto chain.

> Cheers,
> -- 
> Visit Openswan at http://www.openswan.org/
> Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
> Home Page: http://gondor.apana.org.au/~herbert/
> PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

-- 
        Evgeniy Polyakov
-
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to