Subject: Re: esp4: Use high-order sequence number bits for IV generation

From: Steffen Klassert <[email-masked]>
Date: Wed, 13 May 2015 12:18:35 +0200

On Wed, May 13, 2015 at 03:26:10PM +0800, Herbert Xu wrote:
> I noticed we were only using the low-order bits for IV generation
> when ESN is enabled.  This is very bad because it means that the
> IV can repeat.  We must use the full 64 bits.

Ugh. This is bad, indeed.

> 
> Signed-off-by: Herbert Xu <[email-masked]>

Patch applied to the ipsec tree, thanks!