IPSec AH hardware offload

2009-01-20 Thread Jamie Iles
Hi, I'm currently developing a driver for a hardware crypto offload engine that is capable of offloading both ESP and AH in IPSec. I've noticed that none of the crypto drivers in 2.6.28 do offload for ahash and that the netkey AH implementation both use synchronous hashes. Are the synchronous soft

Linux 2.6.28 and AEAD initialization

2009-01-20 Thread Andreas Steffen
Hi, with the Linux 2.6.28 kernel the first time xfrm_user.c:xfrm_add_sa() is called with either "rfc4106(gcm(aes))" or "rfc4309(ccm(aes))", an EEXIST error is returned and the installation of the IPsec SA fails. A detailed analysis of the function calls (see trace added below) shows that aead.c:cr