[IPSEC]: Add support for aes-ctr. (405137d1) · Commits · 戴 / test

The below patch allows IPsec to use CTR mode with AES encryption algorithm. Tested this using setkey in ipsec-tools. Signed-off-by:

include/linux/pfkeyv2.h

+1 −0

Original line number	Diff line number	Diff line
		@@ -298,6 +298,7 @@ struct sadb_x_sec_ctx {
		#define SADB_X_EALG_BLOWFISHCBC 7
		#define SADB_EALG_NULL 11
		#define SADB_X_EALG_AESCBC 12
		#define SADB_X_EALG_AESCTR 13
		#define SADB_X_EALG_AES_CCM_ICV8 14
		#define SADB_X_EALG_AES_CCM_ICV12 15
		#define SADB_X_EALG_AES_CCM_ICV16 16

+17 −0

Original line number	Diff line number	Diff line
		@@ -399,6 +399,23 @@ static struct xfrm_algo_desc ealg_list[] = {
		.sadb_alg_maxbits = 256
		}
		},
		{
		.name = "rfc3686(ctr(aes))",

		.uinfo = {
		.encr = {
		.blockbits = 128,
		.defkeybits = 160, /* 128-bit key + 32-bit nonce */
		}
		},

		.desc = {
		.sadb_alg_id = SADB_X_EALG_AESCTR,
		.sadb_alg_ivlen = 8,
		.sadb_alg_minbits = 128,
		.sadb_alg_maxbits = 256
		}
		},
		};

		static struct xfrm_algo_desc calg_list[] = {