denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

proposal: Add AES-GCM to the ESP default AEAD proposal

Browse Source 
References #3461.
This commit is contained in:
Tobias Brunner
2020-06-12 13:45:58 +02:00
parent bc40509057
commit c7bef954ee
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/crypto/proposal/proposal.c
+7 -3
View File
@@ -1298,9 +1298,13 @@ proposal_t *proposal_create_default_aead(protocol_id_t protocol)
} }
return &this->public; return &this->public;
case PROTO_ESP: case PROTO_ESP:
/* we currently don't include any AEAD proposal for ESP, as we /* AES-GCM should be supported by pretty much all current kernels,
* don't know if our kernel backend actually supports it. */ * RFC 8221 even made it mandatory */
return NULL; this = (private_proposal_t*)proposal_create(protocol, 0);
add_algorithm(this, ENCRYPTION_ALGORITHM, ENCR_AES_GCM_ICV16, 128);
add_algorithm(this, ENCRYPTION_ALGORITHM, ENCR_AES_GCM_ICV16, 192);
add_algorithm(this, ENCRYPTION_ALGORITHM, ENCR_AES_GCM_ICV16, 256);
return &this->public;
case PROTO_AH: case PROTO_AH:
default: default:
return NULL; return NULL;