From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from email.studentenwerk.mhn.de (email.studentenwerk.mhn.de [141.84.225.229]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A8DF03B2BA; Tue, 14 Apr 2026 17:01:43 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=141.84.225.229 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776186106; cv=none; b=nBkUJG+M15jkCw7bjeXP6E6fFI41RuK/MwSyn0gpmIe/83Wp6Z7jqI2RUZTf8+G3/ev4iydStnK5lQN0ooNN5kHJigIM4b2Iq4z9zLc89K+ieNUN/M7KrHmQpPuXBj3ThwYJS3kSQ9OtlTZRb9D+G0X+UmmYeWBT+YEieumXJLg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776186106; c=relaxed/simple; bh=gHZPrFG3LDG8oEy7CnrVaWDUBCHJqWi6pduHY7Kh2CI=; h=MIME-Version:Date:From:To:Cc:Subject:In-Reply-To:References: Message-ID:Content-Type; b=oGR9QXzUXqXY4kz61ZE+kKo33z3SLWjGT1/FNYQ7jPApu9VHR5HtHST+5pM9JfFxaPLdP3U6BMyk2UGrhmGwrEMzAzXMMe0wxco9DIBiLTkZ1TlzBnoQDSiKZCBzWqNEa44w/1tFUUdaQDkXp2EM+IwIjZ7V0awN1cNVKJU9IS0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=stwm.de; spf=pass smtp.mailfrom=stwm.de; dkim=pass (2048-bit key) header.d=stwm.de header.i=@stwm.de header.b=nkiGu7nw; arc=none smtp.client-ip=141.84.225.229 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=stwm.de Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=stwm.de Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=stwm.de header.i=@stwm.de header.b="nkiGu7nw" Received: from mailhub.studentenwerk.mhn.de (mailhub.studentenwerk.mhn.de [127.0.0.1]) by email.studentenwerk.mhn.de (Postfix) with ESMTPS id 4fw9LG6Y52zRhRN; Tue, 14 Apr 2026 18:52:22 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=stwm.de; s=stwm-20170627; t=1776185542; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IuUOAS4QDYX1ofYZk0KZwmhWyuzk2e3HVXTOLnsac5I=; b=nkiGu7nwQWrZPot5m/B1bt+b2iTsqif7ZOXuhKUMbbPGaiqSlQorpYXFE0wiLatCr4Qohr yAnconKVX/V/YYEKiZ51hoQbFROrEfRc8EOxpvIzmkoBXjDG3+8sors53TW+z8QcbpYsed sw90J1nmWt5+DyCMGbgT15Ad+eOwrXNgGe2AiLGySIzj7ScBgOfkJhovzDNjCYyHmXIEnd YB86FAWy8pTdPLBlONs/axd+tW9JyvVynfUvnrXmXHGjcsSMt4HRPrpie9fh3Y6648+JL9 dQSWflQIEs/QD+QxTeIREtj3JbmzksEQhhJMr6C3CQ2H0wzbrFS3dya7N7G28g== Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Date: Tue, 14 Apr 2026 18:52:22 +0200 From: Wolfgang Walter To: Greg Kroah-Hartman Cc: linux-kernel@vger.kernel.org, stable@vger.kernel.org, Herbert Xu , Sasha Levin Subject: Regression Linux 6.18.22: ipsec stops working: reason: commit 153d5520c3f9 "crypto: authencesn - Do not place hiseq at end of dst for out-of-place d.cryption" In-Reply-To: <2026041152-boaster-patrol-1918@gregkh> References: <2026041152-boaster-patrol-1918@gregkh> Message-ID: X-Sender: linux@stwm.de Organization: =?UTF-8?Q?Studierendenwerk_M=C3=BCnchen_Oberbayern?= Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hello, with 6.12.18 ipsec stopped working for us. After reverting commit commit 153d5520c3f9fd62e71c7e7f9e34b59cf411e555. Author: Herbert Xu Date: Fri Mar 27 15:04:17 2026 +0900 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption [ Upstream commit e02494114ebf7c8b42777c6cd6982f113bfdbec7 ] When decrypting data that is not in-place (src != dst), there is no need to save the high-order sequence bits in dst as it could simply be re-copied from the source. However, the data to be hashed need to be rearranged accordingly. Reported-by: Taeyang Lee <0wn@theori.io> Fixes: 104880a6b470 ("crypto: authencesn - Convert to new AEAD interface") Signed-off-by: Herbert Xu Thanks, Signed-off-by: Herbert Xu Signed-off-by: Sasha Levin ipsec worked again. We use esn here. Regards, -- Wolfgang Walter Studierendenwerk München Oberbayern Anstalt des öffentlichen Rechts