On Mon, May 21, 2007 at 11:44:15AM +0900, Noriaki TAKAMIYA wrote: > > > Is there a case where this is difficult? > > As you said, ipsec-tools(setkey) won't have such problem. I think of > the user who uses iproute(ip). > > Now, 2.6.21 is going to be shipped in Fedora Core7. So the user of > Camellia on the FC7 must use keyword "cbc(camellia)" with iproute. Well I must say that this is intentional :) We want to people to get into the habit of spelling it out in full, i.e., "cbc(aes)" instead of "aes" because it's umabiguous and still short enough to type. We can't force people to stop using "aes" so the best we can do is to change to the new way with new algorithms such as camellia where there wouldn't be a compatibility issue. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html