Subject: Re: [RFC ipsec-next] xfrm: make sha256 icv truncation length RFC-compliant

From: Nicolas Dichtel <[email-masked]>
Date: Thu, 22 May 2014 18:03:36 +0200

Le 22/05/2014 17:10, Horia Geanta a écrit :
> From: Lei Xu <[email-masked]>
>
> Currently the sha256 icv truncation length is set to 96bit
> while the length is defined as 128bit in RFC4868.
> This may result in somer errors when working with other IPsec devices
> with the standard truncation length.
> Thus, change the sha256 truncation length from 96bit to 128bit.
The patch was already proposed, but it was kept as-is for userspace
compatibility.

See: https://lkml.org/lkml/2012/3/7/431

Regards,
Nicolas