Revert "crypto: caam - add IPsec ESN support"
This reverts commit 891104ed . Current IPsec ESN implementation for authencesn(cbc(aes), hmac(sha)) (separate encryption and integrity algorithms) does not conform to RFC4303. ICV is generated by hashing the sequence SPI, SeqNum-High, SeqNum-Low, IV, Payload instead of SPI, SeqNum-Low, IV, Payload, SeqNum-High. Cc: <stable@vger.kernel.org> # 3.8, 3.7 Reported-by:Chaoxing Lin <Chaoxing.Lin@ultra-3eti.com> Signed-off-by:
Horia Geanta <horia.geanta@freescale.com> Reviewed-by:
Kim Phillips <kim.phillips@freescale.com> Signed-off-by:
Herbert Xu <herbert@gondor.apana.org.au>
parent
991155ba
Please register or sign in to comment