diff options
author | Joy Latten <latten@austin.ibm.com> | 2008-02-08 08:11:56 +0100 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2008-02-08 08:11:56 +0100 |
commit | 405137d16fbe4c80b9e06e61af05856027745d23 (patch) | |
tree | 67c9540d5b7d968782b0d05d6a8cdee5f70afae9 /net | |
parent | [ISDN]: fix section mismatch warning in enpci_card_msg (diff) | |
download | linux-405137d16fbe4c80b9e06e61af05856027745d23.tar.xz linux-405137d16fbe4c80b9e06e61af05856027745d23.zip |
[IPSEC]: Add support for aes-ctr.
The below patch allows IPsec to use CTR mode with AES encryption
algorithm. Tested this using setkey in ipsec-tools.
Signed-off-by: Joy Latten <latten@austin.ibm.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r-- | net/xfrm/xfrm_algo.c | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/net/xfrm/xfrm_algo.c b/net/xfrm/xfrm_algo.c index 6cc15250de69..8aa6440d689f 100644 --- a/net/xfrm/xfrm_algo.c +++ b/net/xfrm/xfrm_algo.c @@ -399,6 +399,23 @@ static struct xfrm_algo_desc ealg_list[] = { .sadb_alg_maxbits = 256 } }, +{ + .name = "rfc3686(ctr(aes))", + + .uinfo = { + .encr = { + .blockbits = 128, + .defkeybits = 160, /* 128-bit key + 32-bit nonce */ + } + }, + + .desc = { + .sadb_alg_id = SADB_X_EALG_AESCTR, + .sadb_alg_ivlen = 8, + .sadb_alg_minbits = 128, + .sadb_alg_maxbits = 256 + } +}, }; static struct xfrm_algo_desc calg_list[] = { |