You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Steffen Klassert 6fa5ddcc67 xfrm: Don't allow esn with disabled anti replay detection ... Unlike the standard case, disabled anti replay detection needs some nontrivial extra treatment on ESN. RFC 4303 states: Note: If a receiver chooses to not enable anti-replay for an SA, then the receiver SHOULD NOT negotiate ESN in an SA management protocol. Use of ESN creates a need for the receiver to manage the anti-replay window (in order to determine the correct value for the high-order bits of the ESN, which are employed in the ICV computation), which is generally contrary to the notion of disabling anti-replay for an SA. So return an error if an ESN state with disabled anti replay detection is inserted for now and add the extra treatment later if we need it. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: David S. Miller <davem@davemloft.net>		14 years ago
..
Kconfig	…
Makefile	xfrm: Move IPsec replay detection functions to a separate file	14 years ago
xfrm_algo.c	xfrm: Pass name as const to xfrm_*_get_byname().	14 years ago
xfrm_hash.c	…
xfrm_hash.h	xfrm: Const'ify address args to hash helpers.	14 years ago
xfrm_input.c	xfrm: Move the test on replay window size into the replay check functions	14 years ago
xfrm_ipcomp.c	…
xfrm_output.c	dst: Clone child entry in skb_dst_pop	14 years ago
xfrm_policy.c	xfrm: Assign the inner mode output function to the dst entry	14 years ago
xfrm_proc.c	…
xfrm_replay.c	xfrm: Don't allow esn with disabled anti replay detection	14 years ago
xfrm_state.c	xfrm: Assign esn pointers when cloning a state	14 years ago
xfrm_sysctl.c	…
xfrm_user.c	xfrm: Check for the new replay implementation if an esn state is inserted	14 years ago