Hi, here is a second patch after "ah: update maximum truncated ICV length". Sorry for not being more watchful the first time. 512 is the maximum I found in net/xfrm/xfrm_algo.c Regards, Nicolas