ocf-linux-users

[Ocf-linux-users] Auth check and Decryption clubbed together in ipsec_ocf_rcv?

[hiren j. <jos...@gm...>]

Hello,

I have a question related to Openswan-2.6.24 KLIPS.
While calling crypto_dispatch from ipsec_ocf_rcv, do authentication
and decryption operations clubbed together?
Authentication check and decryption is done in one shot or separately?

Thanks for your time.
Hiren

Re: [Ocf-linux-users] Auth check and Decryption clubbed together in ipsec_ocf_rcv?

[David M. <dav...@mc...>]

Jivin hiren joshi lays it down ...
> Hello,
> 
> I have a question related to Openswan-2.6.24 KLIPS.
> While calling crypto_dispatch from ipsec_ocf_rcv, do authentication
> and decryption operations clubbed together?
> Authentication check and decryption is done in one shot or separately?

Each ocf session is setup with the auth/enc paramaters.
The OCF crypto drivers then process that the best they can.  Currently
all the HW drivers do it in a single operation while the software crypto
driver "cryptosoft" does it individually.

The best place to look is in ipsec_ocf.c in ipsec_ocf_sa_init you will see
how it sets up a single session with auth, auth/enc or just enc.

Cheers,
Davidm

-- 
David McCullough,      dav...@mc...,  Ph:+61 734352815
McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org