Project

General

Profile

Actions
Copy link

Bug #4248

closed
EL EL

AES-GCM doesn't interoperate with devices not using padding

Bug #4248: AES-GCM doesn't interoperate with devices not using padding

Added by Ermal Luçi over 11 years ago. Updated over 11 years ago.

Status:
Resolved
Priority:
High
Assignee:
Ermal Luçi
Category:
IPsec
Target version:
2.2
Start date:
01/20/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2
Affected Architecture:

Description

As reported on https://forum.pfsense.org/index.php?topic=86866.msg477744#msg477744
The linux hosts like to send unpadded packets on AES-GCM i can guess to improve performance.

Need to check if this check needs to be relaxed on the kernel or it should stay as is.

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
 #1

  • Tracker changed from Todo to Bug
  • Subject changed from AES-GCM padding is not manadatory to AES-GCM doesn't interoperate with devices not using padding
  • Status changed from New to Confirmed
  • Assignee set to Ermal Luçi
  • Priority changed from Normal to High
  • Target version changed from 2.2.1 to 2.2

Jim mentioned today we'll get this addressed in 2.2.

Ermal: test setup with AES-GCM to an ASA is setup. will email details momentarily

EL Updated by Ermal Luçi over 11 years ago Actions
Copy link
 #2

  • Status changed from Confirmed to Feedback

Fixed by allowing the blocksize to not be multiple of blocksize.

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
 #3

  • Status changed from Feedback to Resolved

fixed

Actions
Copy link

Also available in: Atom