On Thu, Mar 13, 2008 at 10:34:32AM -0700, Loc Ho wrote: > Hi, > > I had tried this and it works after I manual performed the patch to > iproute2. > > It is possible to use program "ip" to setup algorithm non-combined mode, > such as "authenc(cbc(aes),hmac(md5))"? If so, how? You need to specify two algorithms on the command-line, one for type enc and one for type auth. Otherwise the format is the same as for aead, i.e., type name key. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
