Commit 32b6170c authored by Thomas Egerer's avatar Thomas Egerer Committed by David S. Miller

ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV

The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
to select CRYPTO_ECHAINIV in order to work properly. This solves the
issues caused by a misconfiguration as described in [1].
The original approach, patching crypto/Kconfig was turned down by
Herbert Xu [2].

[1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
[2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2Signed-off-by: default avatarThomas Egerer <hakke_007@gmx.de>
Acked-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 27f7ed2b
...@@ -353,6 +353,7 @@ config INET_ESP ...@@ -353,6 +353,7 @@ config INET_ESP
select CRYPTO_CBC select CRYPTO_CBC
select CRYPTO_SHA1 select CRYPTO_SHA1
select CRYPTO_DES select CRYPTO_DES
select CRYPTO_ECHAINIV
---help--- ---help---
Support for IPsec ESP. Support for IPsec ESP.
......
...@@ -69,6 +69,7 @@ config INET6_ESP ...@@ -69,6 +69,7 @@ config INET6_ESP
select CRYPTO_CBC select CRYPTO_CBC
select CRYPTO_SHA1 select CRYPTO_SHA1
select CRYPTO_DES select CRYPTO_DES
select CRYPTO_ECHAINIV
---help--- ---help---
Support for IPsec ESP. Support for IPsec ESP.
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment