On Tue, Jul 11, 2006 at 02:55:36PM +1000, Herbert Xu ([email protected]) wrote:
> Hi Evgeniy:
Hi Herbert.
> Evgeniy Polyakov <[email protected]> wrote:
> >
> > * IPsec ESP4 port to acrypto
>
> I noticed a bug in the ESP IV processing. When you do ESP asynchronously,
> you can no longer use the last block of the previous packet as the IV of
> the next. This is because the next packet may have started processing
> before the last packet has even been finalised.
I cought that bug too, so IV being used is always copied into old_iv variable,
so integrity is stated.
> A simple solution is to generate a random IV.
Yes, it could be done too.
But actually neither random IV, nor IV created from encrypted previous packet,
nor IV created from unencrypted previous packet are forbidden by spec.
Initial implementation used constant IV there at all.
--
Evgeniy Polyakov
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
