Joy Latten <latten@xxxxxxxxxxxxxx> wrote: > > So, I am thinking CTR and some of the other modes, > other than CBC, that use an IV will fail with this > change since they currently don't have an alg->geniv... > should they have a geniv similar to that of CBC, which > is gotten randomly? The only other mode in the tree currently is ECB, which has no IV at all. Yes CTR should implement its own geniv that simply uses the supplied sequence number (zero extended or truncated if necessary). Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html