Hi, I had tried this and it works after I manual performed the patch to iproute2. It is possible to use program "ip" to setup algorithm non-combined mode, such as "authenc(cbc(aes),hmac(md5))"? If so, how? -Loc -----Original Message----- From: linux-crypto-owner@xxxxxxxxxxxxxxx [mailto:linux-crypto-owner@xxxxxxxxxxxxxxx] On Behalf Of Herbert Xu Sent: Thursday, February 21, 2008 9:46 PM To: Loc Ho Cc: linux-crypto@xxxxxxxxxxxxxxx Subject: Re: Test AES-CCM mode via IPSec (NETKEY) Loc Ho <locnho@xxxxxxxxxxxxx> wrote: > > I am trying to test AES-CCM mode via IPSec. Setkey doesn't seem to > support "aes-ccm" mode. Anyone try this yet? Or should I checkout > OpenSwan or racoon? Sorry, I forgot to submit the iproute2 patch for this. See if this one helps. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
