On Thu, Sep 11, 2014 at 05:10:23PM +0100, Lawrence Manning wrote: > Interesting. One would think this would be a problem for KLIPS not NETKEY, > since NETKEY is “core” kernel code.
OCF is NOT in linux, it is a BSD interface and has been rejected from linux (It is ioctl based and linux doesn't want any new features with ioctl interfaces). Linux has it's own crypto interface. Perhaps klips could be made to use it. Of course on many systems doing software crypto is often faster than using the hardware crypto, although sometimes you want to avoid wasting cpu resources on it if you can. -- Len Sorensen _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
