This patchset adds support for IPsec extended (64-bit) sequence numbers for esp as defined in RFC 4303. Also it adds support for anti-replay windows bigger than 32 packets. To make use of big anti-replay windows and extended sequence numbers, new userspace tools are needed. An example patch for iproute2 is provided with this patchset. It has not much testing yet, in particular I don't have any other implementations of IPsec extended sequence numbers to test against. So this is not yet ready for inclusion, I just want to receive some review on the design before I spend more time on working at it.
The patchset is also available at branch net-next-esn of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/linux-2.6-stk.git Steffen -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
