IPSEC-MB: Use random & non-repeating IV (VPP-1642) 27/18827/2
authorNeale Ranns <nranns@cisco.com>
Thu, 11 Apr 2019 08:18:34 +0000 (08:18 +0000)
committerDamjan Marion <dmarion@me.com>
Sun, 14 Apr 2019 14:45:18 +0000 (14:45 +0000)
commit2f3451992e6fa45be492abf173272cf513fc2842
tree93305dfd95dcdf25449ac4d4a6441c6c79328efc
parente0a04cf5cec49fc6fb70687622ea3a34e3fd0247
IPSEC-MB: Use random & non-repeating IV (VPP-1642)

hard code IV and key lengths based on cipher.
Init IV from random data, use AES instruction to rotate.

Change-Id: I13a6507d12267b823c528660a903787baeba47a0
Signed-off-by: Neale Ranns <nranns@cisco.com>
(cherry picked from commit 21ada3bd7e9bc5cca7c2c8399adcbaa044bf8103)
src/plugins/crypto_ipsecmb/CMakeLists.txt
src/plugins/crypto_ipsecmb/ipsecmb.c
src/vnet/crypto/crypto.c
src/vnet/ipsec/esp_decrypt.c
src/vnet/ipsec/esp_encrypt.c
test/test_ipsec_ah.py
test/test_ipsec_esp.py