[dpdk-dev] [PATCH v2 1/7] examples/ipsec-secgw: change CBC IV generation

On 28/09/2016 04:51, De Lara Guarch, Pablo wrote: > Hi Sergio, > >> -Original Message- >> From: Gonzalez Monroy, Sergio >> Sent: Friday, September 23, 2016 12:45 AM >> To: dev at dpdk.org; De Lara Guarch, Pablo >> Subject: [PATCH v2 1/7] examples/ipsec-secgw: change CBC IV generation >> >>

[dpdk-dev] [PATCH v2 1/7] examples/ipsec-secgw: change CBC IV generation

Hi Sergio, > -Original Message- > From: Gonzalez Monroy, Sergio > Sent: Friday, September 23, 2016 12:45 AM > To: dev at dpdk.org; De Lara Guarch, Pablo > Subject: [PATCH v2 1/7] examples/ipsec-secgw: change CBC IV generation > > NIST SP800-38A recommends two methods to generate unpredict

[dpdk-dev] [PATCH v2 1/7] examples/ipsec-secgw: change CBC IV generation

NIST SP800-38A recommends two methods to generate unpredictable IVs (Initilisation Vector) for CBC mode: 1) Apply the forward function to a nonce (ie. counter) 2) Use a FIPS-approved random number generator This patch implements the first recommended method by using the forward function to generat