New commits:
commit d133f76533003193005e89e6f9efda5495fd8ab4
Author: Andrew Cagney <[email protected]>
Date: Tue Nov 26 12:23:42 2024 -0500
ikev1: in main mode update/use .st_v1_ph1_iv
Use .st_v1_ph1_iv to:
- store initial generated IV
- save encryption output IV
- save decrypted md .v1_decrypt_iv
Like for aggressive mode, update .st_v1_ph1_iv with
MD's .v1_decrypt_iv at the start of processing so it
is available to code needing to send an error response.
(also update .st_v1_new_iv and .st_v1_iv to keep other
code happy).
For discussion see:
IKEv1 encrypts INVALID_ID_INFORMATION with wrong IV #1930
_______________________________________________
Swan-commit mailing list -- [email protected]
To unsubscribe send an email to [email protected]
