[Bug 202091] IPsec aes-gcm does not support ICV8 or ICV12

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202091

            Bug ID: 202091
           Summary: IPsec aes-gcm does not support ICV8 or ICV12
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: jmg at FreeBSD.org

setkey does not support ICV8 or ICV12.

With the recent changes I made, I know the kernel support ICV16, but it will
break if ICV8 or ICV12 is used.  This could be panics or corrupted packets.

Test and verify that ICV8 and ICV12 cannot be set in the kernel on an SA, or
fix them, though this may be harder to do.

-- 
You are receiving this mail because:
You are the assignee for the bug.