On Fri, Oct 19, 2007 at 10:29:32PM +0000, Joy Latten wrote:
>
> I think the change to CTR would be simple.  
> If noncesize + ivsize == blocksize, then use 
> entire counterblock as counter and pass to  
> ctr_inc_quad(). Currently, we just fail 
> if noncesize + ivsize == blocksize.  

How about adding an explicit counter size parameter?

So intead of ctr(aes,4,8) for the standard IPsec CTR we'd have
ctr(aes,4,8,4).  Then GCM can just use ctr(aes,4,12,4).

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
-
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to