On Wed, Nov 25, 2009 at 11:29:50AM +0100, Martin Willi wrote: > The following patchset adds support for defining truncation lengths > for authentication algorithms in userspace. The main purpose for this > is to support SHA256 in IPsec using the standardized 128 bit > instead of the currently used 96 bit truncation. > > Martin Willi (3): > xfrm: Define new XFRM netlink auth attribute with specified > truncation bits > xfrm: Store aalg in xfrm_state with a user specified truncation > length > xfrm: Use the user specified truncation length in ESP and AH Looks great to me. Thanks Martin! -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
