Re: adding new cipher support to kernel

2012-07-05 Thread VANHULLEBUS Yvan
On Wed, Jul 04, 2012 at 02:46:11PM -0400, Dylan Castine wrote:
 Hi,

Hi.


 My name is Dylan,
 
 I want to add support for the AES-GCM cipher to the kernel.
 I am currently using strongswan for an IPsec build and need ESP to use the
 AES-GCM algorithm.
 Any info is appreciated,

Riaan (CCed to this mail) already worked on a patch to provide
software AES-GCM.

Patch isn't actually in HEAD because I still could not find time to do
a last stage review before commiting it.

Feel both free to insult me from time to time unless patch has been
commited :-)

Riaan: do you have a newer version of your patchset, or can I use the
latest you sent to me ?


On userland side, I just don't know if *swan supports AES-GCM.


Yvan.
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org


Re: adding new cipher support to kernel

2012-07-05 Thread Riaan Kruger
 Riaan: do you have a newer version of your patchset, or can I use the

 latest you sent to me ?

Yvan:

The last one I sent, I believe it was named  aesgcm_cleaned.diff is
the latest.
If there is anything I can help with, just say. I know I am not Mr.
Speedy, but I would like to help if I can :)

Yvan  Dylan:

Strongswan does not support aes gcm for freebsd; it does not have the
pfkey identifier in its kernel_pfkey plugin. All it needs is the
identifier in its kernel_pfkey plugin. We have a simple strongswan
patch for that.  The identifier is defined in the freebsd aes gcm
patches that Yvan is looking at.


Riaan
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org


adding new cipher support to kernel

2012-07-04 Thread Dylan Castine
Hi,

My name is Dylan,

I want to add support for the AES-GCM cipher to the kernel.
I am currently using strongswan for an IPsec build and need ESP to use the
AES-GCM algorithm.
Any info is appreciated,

Thanks for your time,

Dylan
___
freebsd-hackers@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
To unsubscribe, send any mail to freebsd-hackers-unsubscr...@freebsd.org