From 0224513249fc5e9fb3bec9eacc04ddecaec00566 Mon Sep 17 00:00:00 2001 From: Kyle McMartin Date: Fri, 15 Aug 2003 17:36:53 -0700 Subject: [IPSEC]: Add support for Twofish and Serpent. This patch adds support for the use of twofish and serpent as ESP algorithms. The ESP index numbers given are in accordance with RFC2407, draft-ietf-ipsec-ciph-aes-cbc-00 (before Rijndael was selected), and KAME which assigns 253 to twofishcbc. Support for using twofish was requested on linux-kernel, and since I noticed serpent was missing too, included that as well. --- include/linux/pfkeyv2.h | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'include/linux/pfkeyv2.h') diff --git a/include/linux/pfkeyv2.h b/include/linux/pfkeyv2.h index df957cba539a..81807d58bb3e 100644 --- a/include/linux/pfkeyv2.h +++ b/include/linux/pfkeyv2.h @@ -284,7 +284,10 @@ struct sadb_x_nat_t_port { #define SADB_X_EALG_BLOWFISHCBC 7 #define SADB_EALG_NULL 11 #define SADB_X_EALG_AESCBC 12 -#define SADB_EALG_MAX 12 +#define SADB_EALG_MAX 253 /* last EALG */ +/* private allocations should use 249-255 (RFC2407) */ +#define SADB_X_EALG_SERPENTCBC 252 /* draft-ietf-ipsec-ciph-aes-cbc-00 */ +#define SADB_X_EALG_TWOFISHCBC 253 /* draft-ietf-ipsec-ciph-aes-cbc-00 */ /* Compression algorithms */ #define SADB_X_CALG_NONE 0 -- cgit v1.2.3