IPSEC-MB: Use random & non-repeating IV (VPP-1642) 07/18807/5
authorNeale Ranns <nranns@cisco.com>
Thu, 11 Apr 2019 08:18:34 +0000 (08:18 +0000)
committerDamjan Marion <dmarion@me.com>
Thu, 11 Apr 2019 15:12:58 +0000 (15:12 +0000)
commit21ada3bd7e9bc5cca7c2c8399adcbaa044bf8103
tree845b74dfee811bfe27f3feef6a608d349e99436d
parent5e282e93ad9f961d332cac9a033be33542979848
IPSEC-MB: Use random & non-repeating IV (VPP-1642)

hard code IV and key lengths based on cipher.
Init IV from random data, use AES instruction to rotate.

Change-Id: I13a6507d12267b823c528660a903787baeba47a0
Signed-off-by: Neale Ranns <nranns@cisco.com>
src/plugins/crypto_ipsecmb/CMakeLists.txt
src/plugins/crypto_ipsecmb/ipsecmb.c
src/vnet/crypto/crypto.c
src/vnet/ipsec/esp_decrypt.c
src/vnet/ipsec/esp_encrypt.c
test/test_ipsec_ah.py
test/test_ipsec_esp.py