From: Evgeniy Polyakov <johnpol@2ka.mipt.ru>
To: Herbert Xu <herbert@gondor.apana.org.au>
Cc: linux-kernel@vger.kernel.org, linux-crypto@vger.kernel.org
Subject: Re: [ACRYPTO] new release of asynchronous crrypto layer.
Date: Tue, 11 Jul 2006 09:31:57 +0400 [thread overview]
Message-ID: <20060711053157.GA6451@2ka.mipt.ru> (raw)
In-Reply-To: <E1G0AHY-0002BE-00@gondolin.me.apana.org.au>
On Tue, Jul 11, 2006 at 02:55:36PM +1000, Herbert Xu (herbert@gondor.apana.org.au) wrote:
> Hi Evgeniy:
Hi Herbert.
> Evgeniy Polyakov <johnpol@2ka.mipt.ru> wrote:
> >
> > * IPsec ESP4 port to acrypto
>
> I noticed a bug in the ESP IV processing. When you do ESP asynchronously,
> you can no longer use the last block of the previous packet as the IV of
> the next. This is because the next packet may have started processing
> before the last packet has even been finalised.
I cought that bug too, so IV being used is always copied into old_iv variable,
so integrity is stated.
> A simple solution is to generate a random IV.
Yes, it could be done too.
But actually neither random IV, nor IV created from encrypted previous packet,
nor IV created from unencrypted previous packet are forbidden by spec.
Initial implementation used constant IV there at all.
--
Evgeniy Polyakov
next prev parent reply other threads:[~2006-07-11 5:32 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-07-10 9:13 [ACRYPTO] new release of asynchronous crrypto layer Evgeniy Polyakov
2006-07-11 4:55 ` Herbert Xu
2006-07-11 5:31 ` Evgeniy Polyakov [this message]
2006-07-11 6:01 ` Herbert Xu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060711053157.GA6451@2ka.mipt.ru \
--to=johnpol@2ka.mipt.ru \
--cc=herbert@gondor.apana.org.au \
--cc=linux-crypto@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.