kern/166508: [glxsb] AES 256 encryption does not work with
patfbsd at davenulle.org
Sun Jun 24 12:50:10 UTC 2012
The following reply was made to PR kern/166508; it has been noted by GNATS.
From: Patrick Lamaiziere <patfbsd at davenulle.org>
To: bug-followup at FreeBSD.org, todd at toddblum.org
Subject: Re: kern/166508: [glxsb] AES 256 encryption does not work with
Date: Sun, 24 Jun 2012 14:33:52 +0200
This is a known issue and a problem within the crypto(9) framework. In
the crypto framework we can only specify the algorithm (here aes) to
use but not the size of the key. As glxsb only does aes-128, it fails
when the crypto framework opens a session on it if the key size if
different than 128.
There is a CAVEAT section in the manual page of glxsb(4) for this :
The crypto(9) framework will fail to open the crypto session on the
device if the AES key's length is != 128 bits. This prevents the
use of the glxsb device driver with AES keys of length != 128 bits.
To make this to work, it need some changes in crypto(9). Sorry.
(we can close this PR I guess, as it will not be solved)
More information about the freebsd-bugs