I was testing ipsec with GMAC and found that the rfc4543 GMAC implementation in
kernel software crypto work in "esp=aes256gmac-noesn!" mode.
It does not work in in "esp=aes256gmac-esn!" mode. The tunnel was established
but no data traffic is possible.
Looking at source code, I found this piece o
1. Can any one point me which RFC describe how exactly authencesn should work?
2. I test Ipsec with "esp=aes256-sha512-esn!" options and found compatibility
issue between kernel software crypto and talitos driver.
Talitos <>talitos Good
Soft crypto<>soft crypto
Support for RSA public key cryptography was added in v3.7. It added a
select for MPILIB_EXTRA. But that Kconfig symbol was already removed in
v3.6, with commit 9e235dcaf4f63d88a7e9ce5735ba5c2eb2719603 ("Revert
"crypto: GnuPG based MPI lib - additional sources (part 4)""). No one
noticed because al
