On Thursday, July 09, 2015 06:16:36 PM George V. Neville-Neil wrote: > Author: gnn > Date: Thu Jul 9 18:16:35 2015 > New Revision: 285336 > URL: https://svnweb.freebsd.org/changeset/base/285336 > > Log: > Add support for AES modes to IPSec. These modes work both in software > only mode and with hardware support on systems that have AESNI > instructions. > > Differential Revision: D2936 > Reviewed by: jmg, eri, cognet > Sponsored by: Rubicon Communications (Netgate) > > Modified: > head/sys/netipsec/xform_ah.c > head/sys/netipsec/xform_esp.c
> @@ -953,6 +989,11 @@ esp_output_cb(struct cryptop *crp) > case CRYPTO_SHA2_512_HMAC: > alen = esph->hashsize/2; > break; > + case CRYPTO_AES_128_GMAC: > + case CRYPTO_AES_192_GMAC: > + case CRYPTO_AES_256_GMAC: > + alen = esph->hashsize; > + break; > default: > alen = AH_HMAC_HASHLEN; > break; This introduces a LINT compile failure: /usr/src/sys/netipsec/xform_esp.c:992:9: error: use of undeclared identifier 'CRYPTO_AES_128_GMAC' case CRYPTO_AES_128_GMAC: ^ /usr/src/sys/netipsec/xform_esp.c:993:9: error: use of undeclared identifier 'CRYPTO_AES_192_GMAC' case CRYPTO_AES_192_GMAC: ^ /usr/src/sys/netipsec/xform_esp.c:994:9: error: use of undeclared identifier 'CRYPTO_AES_256_GMAC' case CRYPTO_AES_256_GMAC: ^ 3 errors generated. --- xform_esp.o --- -- Peter Wemm - pe...@wemm.org; pe...@freebsd.org; pe...@yahoo-inc.com; KI6FJV UTF-8: for when a ' or ... just won\342\200\231t do\342\200\246
signature.asc
Description: This is a digitally signed message part.