2016-07-22, 15:07:55 +0200, Davide Caratti wrote: > This series provides a fix for macsec configurable ICV length. The > maximum length of ICV element has been made compliant to IEEE 802.1AE, > and error reporting in case of cipher suite configuration failure has been > improved. Finally, a test has been added to netlink verify() callback in > order to avoid creation of macsec interfaces having user-provided ICV length > values that are not supported by the cipher suite. > > Signed-off-by: Davide Caratti <dcara...@redhat.com> > > Davide Caratti (3): > macsec: limit ICV length to 16 octets > macsec: fix error codes when a SA is created > macsec: validate ICV length on link creation > > drivers/net/macsec.c | 76 > ++++++++++++++++++++++++++++-------------- > include/uapi/linux/if_macsec.h | 2 ++ > 2 files changed, 53 insertions(+), 25 deletions(-)
Acked-by: Sabrina Dubroca <s...@queasysnail.net> -- Sabrina