Hi Michael,

On the embedded device we have the following logs entries:

SYS DLOG 346 log info verbose 1 charon-systemd: 11[CHD] CHILD_SA
imx-nad{1004} state change: CREATED => INSTALLING
SYS DLOG 346 log info verbose 1 charon-systemd: 11[CHD]   using
CHACHA20_POLY1305 for encryption
SYS DLOG 346 log info verbose 1 charon-systemd: 11[CHD] adding inbound
ESP SA
SYS DLOG 346 log info verbose 1 charon-systemd: 11[KNL] received netlink
error: No such file or directory (2)
SYS DLOG 346 log info verbose 1 charon-systemd: 11[KNL] unable to add
SAD entry with SPI c106f683 (FAILED)

lsmod shows that the module is loaded:

# lsmod
Module                  Size  Used by
chacha_generic         16384  0
poly1305_generic       16384  0
chacha20poly1305       20480  0

Any ideas what might be wrong in the setup? Any  ideas howto debug further?

Do you by any chance have FIPS mode enabled? (The kernel's crypto API will return ENOENT when trying to instantiate an algorithm that's not FIPS-approved, which I think chacha20poly1305 isn't.)

Regards,
Tobias

Reply via email to