https://bugs.linaro.org/show_bug.cgi?id=3998
--- Comment #6 from Dmitry Eremin-Solenikov
---
Created https://bugs.linaro.org/show_bug.cgi?id=4002 to track ESN-rejection
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.linaro.org/show_bug.cgi?id=3998
--- Comment #5 from Janne Peltonen ---
Currently odp_ipsec_sa_create() silently ignores the esn flag and creates an SA
with a regular sequence number.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.linaro.org/show_bug.cgi?id=3998
--- Comment #4 from Bill Fischofer ---
Sorry, make that RFC 4304 in the above comment.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.linaro.org/show_bug.cgi?id=3998
--- Comment #3 from Bill Fischofer ---
Per RFC 4303, ESNs are optional in IPsec and must be negotiated by IKE. The
odp_ipsec_sa_opt_t has an esn bit, requesting that the SA be created with ESN
support. The expected behavior is for the
https://bugs.linaro.org/show_bug.cgi?id=3998
--- Comment #2 from Dmitry Eremin-Solenikov
---
ESN is a tricky part of the standard, especially "retry the high bits". It does
not play well with the ODP crypto part. I will work on implementing ESN
support, but it will take time.
Related question:
https://bugs.linaro.org/show_bug.cgi?id=3998
Bill Fischofer changed:
What|Removed |Added
Assignee|maxim.uva...@linaro.org |dmitry.ereminsolenikov@lina
