esp: select CRYPTO_SEQIV
Commitf23efcbcc5
("crypto: ctr - no longer needs CRYPTO_SEQIV") made CRYPTO_CTR stop selecting CRYPTO_SEQIV. This breaks IPsec for most users since GCM and several other encryption algorithms require "seqiv" -- and RFC 8221 lists AES-GCM as "MUST" be implemented. Just make XFRM_ESP select CRYPTO_SEQIV. Fixes:f23efcbcc5
("crypto: ctr - no longer needs CRYPTO_SEQIV") Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Cc: Corentin Labbe <clabbe@baylibre.com> Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Cc: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
This commit is contained in:
Родитель
7d4e391959
Коммит
37ea0f18fb
|
@ -86,6 +86,7 @@ config XFRM_ESP
|
|||
select CRYPTO_SHA1
|
||||
select CRYPTO_DES
|
||||
select CRYPTO_ECHAINIV
|
||||
select CRYPTO_SEQIV
|
||||
|
||||
config XFRM_IPCOMP
|
||||
tristate
|
||||
|
|
Загрузка…
Ссылка в новой задаче