On Tue, Aug 06, 2019 at 09:20:52AM +0000, Pascal Van Leeuwen wrote: > > The discussion below still lacks some resolution ... > > What is boils down to is: what should an authenc AEAD driver do when it > gets a setauthsize request of zero? It must support zero for the special case of digest_null, which is used to test the IPsec stack. In other cases I'm OK with forbidding the use of zero as the IPsec code won't allow a zero to get through anyway (IOW you can only access this code path via af_alg). Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt