From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0A61F3264CE; Tue, 14 Apr 2026 16:58:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776185916; cv=none; b=ld0XWzcHLHFUE26u0xnLDH7wXoLkKCrVTkIeKEtQ6qKkY9Re35cXzrWa6UCgh+S4VOZ3ZQdZnd4DCww1586vGpchRvcZ5YoQ/1c0nE1yIW24bcuRoGzE4Q4Wp56kw0UiTjteuVaM270UAVys8yB9I5OwEP1bIDdMpFrkxOLndaw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776185916; c=relaxed/simple; bh=CDqRdF6jJ/wVX5TXMdX295aYq8/PzSBpFt58rwujQPI=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=Ou4xLRYSWe7ye+0f4zqzyss+Ke9R1p2TllJfSGmqkxUQFy4g1f9m5UV4xWlbrfScsigSFc/FZfp6TNG6L5DAIvpWU6NYa3SXgsMh3f/Ado2hjwmuE9RRRaXVRWSCtULGTZNwt+rA/fhCywvlCNakI4eOmTMJrRHOxVVjIPHZZy0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=N1kvt2VE; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="N1kvt2VE" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 841E8C19425; Tue, 14 Apr 2026 16:58:35 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1776185915; bh=CDqRdF6jJ/wVX5TXMdX295aYq8/PzSBpFt58rwujQPI=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=N1kvt2VEPs35RNdZxPNDaxvUlalbzFdq60/0bjQHpekLUW6UjJ1D48PLiLtjIIcbr 4M4kBEe8V+2BwmX1b+3imTHghfzqDW0p/kPs5EkP4GMShFfElPM+2aktNh6tFgeFjp 81U0T4Yd5z6PxxOlp2dB82kaYM56DxPUaXi27lEbyajthKsmKRI8o+91PKy8tS+EyO bZah31UzQkm/1oehVDjZe2+rmRuBrPuP0kZ5WP0PKJKnEQBzqenHHJfMbRwk9Sw1Y/ WYGY8kfM5Ded9oWJhL8X/fNQCiEMYh89Ee06E65XOH/Vo98papNP54Y18JItsawyer nTBcwK6oJvT+w== Date: Tue, 14 Apr 2026 12:58:34 -0400 From: Sasha Levin To: Wolfgang Walter Cc: Greg Kroah-Hartman , linux-kernel@vger.kernel.org, stable@vger.kernel.org, Herbert Xu Subject: Re: Regression Linux 6.18.22: ipsec stops working: reason: commit 153d5520c3f9 "crypto: authencesn - Do not place hiseq at end of dst for out-of-place d.cryption" Message-ID: References: <2026041152-boaster-patrol-1918@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: On Tue, Apr 14, 2026 at 06:52:22PM +0200, Wolfgang Walter wrote: >Hello, > >with 6.12.18 ipsec stopped working for us. After reverting commit > >commit 153d5520c3f9fd62e71c7e7f9e34b59cf411e555. >Author: Herbert Xu >Date: Fri Mar 27 15:04:17 2026 +0900 > > crypto: authencesn - Do not place hiseq at end of dst for >out-of-place decryption > > [ Upstream commit e02494114ebf7c8b42777c6cd6982f113bfdbec7 ] > > When decrypting data that is not in-place (src != dst), there is > no need to save the high-order sequence bits in dst as it could > simply be re-copied from the source. > > However, the data to be hashed need to be rearranged accordingly. > > Reported-by: Taeyang Lee <0wn@theori.io> > Fixes: 104880a6b470 ("crypto: authencesn - Convert to new AEAD >interface") > Signed-off-by: Herbert Xu > > Thanks, > > Signed-off-by: Herbert Xu > Signed-off-by: Sasha Levin > > >ipsec worked again. We use esn here. Thanks for the report! Could you please check if you see the issue with mainline? -- Thanks, Sasha