This series provides a fix for macsec configurable ICV length. The maximum length of ICV element has been made compliant to IEEE 802.1AE, and error reporting in case of cipher suite configuration failure has been improved. Finally, a test has been added to netlink verify() callback in order to avoid creation of macsec interfaces having user-provided ICV length values that are not supported by the cipher suite.
Signed-off-by: Davide Caratti <dcara...@redhat.com> Davide Caratti (3): macsec: limit ICV length to 16 octets macsec: fix error codes when a SA is created macsec: validate ICV length on link creation drivers/net/macsec.c | 76 ++++++++++++++++++++++++++++-------------- include/uapi/linux/if_macsec.h | 2 ++ 2 files changed, 53 insertions(+), 25 deletions(-) -- 2.5.5
