RFC Add IPsec extended (64-bit) sequence numbers
Get series with b4
b4 am [email protected]Versions newest first · linked by author and title
- v2 RFC Latest9 patches 7 repliesIn review
- v1 RFC11 patches 3 repliesSuperseded
Changes in v2 from the cover letter
- Use a SG list with three 4 byte entries for the associated data.
- Fix the sequence number to be in network byte order when using AEAD algorithms.
- Rebased to net-next-2.6 current.
Patches in v2 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/9 | crypto: authencesn - Add algorithm to handle IPsec extended sequence numberscrypto/ crypto/ | +836 | 4 replies | |
| 2/9 | xfrm: Add basic infrastructure to support IPsec extended sequence numbersinclude/ include/ | +19 | 3 replies | |
| 3/9 | xfrm: Use separate low and high order bits of the sequence numbers in xfrm_skb_cbinclude/ net/ net/ +4 more | +17 | 0 replies | |
| 4/9 | esp4: Add support for IPsec extended sequence numbersnet/ | +82 | 0 replies | |
| 5/9 | esp6: Add support for IPsec extended sequence numbersnet/ | +86 | 0 replies | |
| 6/9 | xfrm: Move IPsec replay detection functions to a separate fileinclude/ net/ net/ +4 more | +174 | 0 replies | |
| 7/9 | xfrm: Support anti-replay window size bigger than 32 packetsnet/ | +206 | 0 replies | |
| 8/9 | xfrm: Add support for IPsec extended sequence numbersinclude/ net/ net/ | +194 | 0 replies | |
| 9/9 | xfrm: Add user interface for esn and big anti-replay windowsnet/ net/ | +87 | 0 replies |
Reviews trailers per patch
1 of 9 patches has a Reviewed-by or Acked-by.
| Patch | Herbert Xu |
|---|---|
| 1/9 | |
| 2/9 | A-b |
| 3/9 | |
| 4/9 | |
| 5/9 | |
| 6/9 | |
| 7/9 | |
| 8/9 | |
| 9/9 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [RFC v2 PATCH 0/9] Add IPsec extended (64-bit) sequence numbers
This patchset adds support for IPsec extended (64-bit) sequence numbers for esp as defined in RFC 4303. Also it adds support for anti-replay windows bigger than 32 packets. To make use of big anti-replay windows and extended sequence numbers, new userspace tools are needed. An example patch for iproute2 is provided with this patchset.
Known issues:
- Not tested against another implementation of IPsec extended sequence numbers.
Changes from v1:
- Use a SG list with three 4 byte entries for the associated data.
- Fix the sequence number to be in network byte order when using AEAD algorithms.
- Rebased to net-next-2.6 current.
The patchset is also available at branch 'net-next-esn' of
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/linux-2.6-stk.git
Steffen