New commits:
commit b08fb2a7a268eba18a15ced4c5b9d22bfd83ac4e
Author: Andrew Cagney <[email protected]>
Date: Tue Nov 26 11:42:28 2024 -0500
ikev1: in aggressive mode update/use .st_v1_ph1_iv early
Use .st_v1_ph1_iv to:
- store initial generated IV
- save encryption output IV
- save decrypted md .v1_decrypt_iv
Move the update from .v1_decrypt_iv close to the start of
the processor so that it is available to any error response.
(also update .st_v1_new_iv and .st_v1_iv to keep other
code happy).
For discussion see:
IKEv1 encrypts INVALID_ID_INFORMATION with wrong IV #1930
_______________________________________________
Swan-commit mailing list -- [email protected]
To unsubscribe send an email to [email protected]
