user/sven/linux.git/net/ipv6/esp6.c, branch tmp/leds/core

netns xfrm: AH/ESP in netns!

2008-11-26T01:59:27Z

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

netns xfrm: state lookup in netns

2008-11-26T01:30:50Z

Signed-off-by: Alexey Dobriyan Signed-off-by: David S. Miller

net: replace %p6 with %pI6

2008-10-29T19:52:50Z

Signed-off-by: Harvey Harrison Signed-off-by: David S. Miller

net: replace uses of NIP6_FMT with %p6

2008-10-29T06:02:31Z

Signed-off-by: Harvey Harrison Signed-off-by: David S. Miller

ipsec: Interfamily IPSec BEET, ipv4-inner ipv6-outer

2008-08-06T09:40:25Z

Here's a revised version, based on Herbert's comments, of a fix for the ipv4-inner, ipv6-outer interfamily ipsec beet mode. It fixes the network header adjustment during interfamily, as well as makes sure that we reserve enough room for the new ipv6 header if we might have something else as the inner family. Also, the ipv4 pseudo header construction was added. Signed-off-by: Joakim Koskela Acked-by: Herbert Xu Signed-off-by: David S. Miller

[ESP]: Ensure IV is in linear part of the skb to avoid BUG() due to OOB access

2008-03-27T23:08:03Z

ESP does not account for the IV size when calling pskb_may_pull() to ensure everything it accesses directly is within the linear part of a potential fragment. This results in a BUG() being triggered when the both the IPv4 and IPv6 ESP stack is fed with an skb where the first fragment ends between the end of the esp header and the end of the IV. This bug was found by Dirk Nehring . Signed-off-by: Thomas Graf Signed-off-by: David S. Miller

[IPSEC]: Fix bogus usage of u64 on input sequence number

2008-02-13T06:50:35Z

Al Viro spotted a bogus use of u64 on the input sequence number which is big-endian. This patch fixes it by giving the input sequence number its own member in the xfrm_skb_cb structure. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller

[XFRM]: constify 'struct xfrm_type'

2008-02-01T03:27:20Z

Signed-off-by: Eric Dumazet Signed-off-by: David S. Miller

[IPSEC]: Add support for combined mode algorithms

2008-02-01T03:27:03Z

This patch adds support for combined mode algorithms with GCM being the first algorithm supported. Combined mode algorithms can be added through the xfrm_user interface using the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms is identified by its name and the ICV length. For the purposes of matching algorithms in xfrm_tmpl structures, combined mode algorithms occupy the same name space as encryption algorithms. This is in line with how they are negotiated using IKE. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller

[IPSEC]: Use crypto_aead and authenc in ESP

2008-02-01T03:27:02Z

This patch converts ESP to use the crypto_aead interface and in particular the authenc algorithm. This lays the foundations for future support of combined mode algorithms. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller