crypto, ipsec: change GCM IV handling 82/19182/2
authorDamjan Marion <damarion@cisco.com>
Thu, 25 Apr 2019 16:28:31 +0000 (18:28 +0200)
committerFlorin Coras <florin.coras@gmail.com>
Fri, 26 Apr 2019 14:13:00 +0000 (14:13 +0000)
commitd97918ec678c4086001840e7263ba9ac3504ce24
treeb490f0318dc8bae6b7d8f90f789c416414bf0b17
parentaaed170828dfdb3d62295b76fd617f794dc76b3f
crypto, ipsec: change GCM IV handling

- nonce construction out of salt and iv is ipsec specific so it should be
handled in ipsec code

- fixes GCM unit tests

- GCM IV is constructed out of simple counter, per RFC4106 section 3.1

Change-Id: Ib7712cc9612830daa737f5171d8384f1d361bb61
Signed-off-by: Damjan Marion <damarion@cisco.com>
src/plugins/crypto_ipsecmb/ipsecmb.c
src/plugins/crypto_openssl/main.c
src/vnet/crypto/crypto.h
src/vnet/ipsec/esp_encrypt.c
src/vnet/ipsec/ipsec_sa.h