CVSROOT: /cvs Module name: src Changes by: to...@cvs.openbsd.org 2020/11/26 15:24:07
Modified files:
sbin/iked : crypto.c iked.h
Log message:
Use a counter instead of random IV for AES-GCM. Security depends on
choosing a unique IV for every encryption operation, using a counter
as IV eliminates the risk of random collisions.
ok markus@ patrick@
