lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Tue, 9 Jun 2020 17:54:01 -0700 From: Eric Biggers <ebiggers@...nel.org> To: netdev@...r.kernel.org Cc: linux-crypto@...r.kernel.org, Corentin Labbe <clabbe@...libre.com>, Greg Kroah-Hartman <gregkh@...uxfoundation.org>, Herbert Xu <herbert@...dor.apana.org.au>, Steffen Klassert <steffen.klassert@...unet.com> Subject: [PATCH net v3 2/3] esp: select CRYPTO_SEQIV From: Eric Biggers <ebiggers@...gle.com> Commit f23efcbcc523 ("crypto: ctr - no longer needs CRYPTO_SEQIV") made CRYPTO_CTR stop selecting CRYPTO_SEQIV. This breaks IPsec for most users since GCM and several other encryption algorithms require "seqiv" -- and RFC 8221 lists AES-GCM as "MUST" be implemented. Just make XFRM_ESP select CRYPTO_SEQIV. Fixes: f23efcbcc523 ("crypto: ctr - no longer needs CRYPTO_SEQIV") made Cc: Corentin Labbe <clabbe@...libre.com> Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Cc: Herbert Xu <herbert@...dor.apana.org.au> Cc: Steffen Klassert <steffen.klassert@...unet.com> Signed-off-by: Eric Biggers <ebiggers@...gle.com> --- net/xfrm/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/net/xfrm/Kconfig b/net/xfrm/Kconfig index 169c22140709f7..b2ff8df2c836ef 100644 --- a/net/xfrm/Kconfig +++ b/net/xfrm/Kconfig @@ -86,6 +86,7 @@ config XFRM_ESP select CRYPTO_SHA1 select CRYPTO_DES select CRYPTO_ECHAINIV + select CRYPTO_SEQIV config XFRM_IPCOMP tristate -- 2.26.2
Powered by blists - more mailing lists