Does ESP support 64 bit sequence numbering for authentication hash ?

2009-01-14 Thread Dean Jenkins
that it should not use the top 32 bits of seq ? Or is it simply that if the top 32 bits are zero then the HMAC just uses the lower 32 bits ? Thanks for any insight. Regards, Dean Jenkins MontaVista Software -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" i

Re: kernel BUG at crypto/scatterwalk.c:37! when using modified tcrypt for HMAC testing

2009-01-13 Thread Dean Jenkins
Hi Herbert, Many thanks that fixed it. Regards, Dean Jenkins MontaVista Software --- Begin Message --- Dean Jenkins wrote: > > I'm using a 2.6.27.4 kernel on an armv5te platform. > > I hit a BUG() at crypto/scatterwalk.c:37 that indicates that the scatterlist > lengt

kernel BUG at crypto/scatterwalk.c:37! when using modified tcrypt for HMAC testing

2009-01-12 Thread Dean Jenkins
o ? Is there a "special" relationship to create the IV buffer with respect to the dst scatterlist within tcrypt so that chain = 1 ? If I use ESP4 in IPsec instead of tcrypt, then chain does equal 1. Thanks for any info ? Regards, Dean Jenkins MontaVista Software -- To unsubscribe from thi

Re: ESP output when using NULL encryption and NON authentication

2008-12-02 Thread Dean Jenkins
Hi Herbert, Thanks for the clue. I had set the IV size to AES_BLOCK_SIZE in my NULL crypto registered structure. Now fixed the IV size to 0 and put the maxauthsize also to 0. Now I have basic Async AEAD NULL enc and NON auth working with ping over ESP. Regards, Dean Jenkins MontaVista Software

ESP output when using NULL encryption and NON authentication

2008-11-27 Thread Dean Jenkins
n and NON authentication. Can someone please explain ? Also, I note that tcrypt.ko does not test authenc. Thanks, Dean Jenkins MontaVista Software -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to [EMAIL PROTECTED] More majordom

Module load sequence

2008-11-07 Thread Dean Jenkins
c(aes))" ? Thanks for any info. Regards, Dean Jenkins MontaVista Software -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html

Are there any drivers that use aead.ko

2008-11-07 Thread Dean Jenkins
. Regards, Dean Jenkins MontaVista software -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html

Unloading hardware based crypto to fallback to software based crypto

2008-11-07 Thread Dean Jenkins
during the session. Conversely, is there a mechanism to dynamically upgrade from using software based crypto to hardware based crypto without killing the IPsec tunnel ? Thanks for any info. Regards, Dean Jenkins MontaVista Software -- To unsubscribe from this list: send the line "unsubscribe

What is the difference between aead.ko and authenc.ko ?

2008-11-07 Thread Dean Jenkins
Hi, Can anyone explain the difference between aead.ko and authenc.ko ? How does crypto decide to use aead.ko instead of authenc.ko ? I am guessing it is something to do with XFRM ? Thanks, Regards, Dean Jenkins MontaVista Software -- To unsubscribe from this list: send the line "unsubs

Can anyone explain the AEAD implementation

2008-11-03 Thread Dean Jenkins
for the AEAD API ? For example, I want to use a particular AES and SHA-1 implementations in a hardware accelerator. Thanks, Regards, Dean Jenkins MontaVista Software -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to [EMAIL PROTE

Re: IPsec books and how to add async hardware encryption ?

2008-11-03 Thread Dean Jenkins
ync hardware > > crypto off-loading ? > > cryptd is an software engine example of how hardware driver could be > implemented. Are you saying that to implement an async hardware driver I could use the APIs used by cryptd and create my own hwcryptd ? If yes, is there any documentation for

IPsec books and how to add async hardware encryption ?

2008-10-31 Thread Dean Jenkins
Hi, I am having difficulty finding a book that describes IPsec that includes IKEv2 and is preferably aimed at using Linux crypto. Can anyone recommend such a book ? Also, how do I find info on the cypto APIs eg. how to use cryptd (2.6.24 kernel) ? I'm working on a project that uses an embedde