Hi: It appears that your implementation of ghash is buggy: https://bugzilla.redhat.com/show_bug.cgi?id=1207598 The gist of the report is that using s390 ghash causes IPsec to fail when the other side is x86_64. Using the generic ghash code on the s390 side fixes it. Please look into this. Thanks, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html