Thomas Egerer e424bee248 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV ...

commit 32b6170ca5 upstream.

The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
to select CRYPTO_ECHAINIV in order to work properly. This solves the
issues caused by a misconfiguration as described in [1].
The original approach, patching crypto/Kconfig was turned down by
Herbert Xu [2].

[1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
[2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2

Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Cc: Yongqin Liu <yongqin.liu@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-08-15 17:42:05 +02:00

..

6lowpan

…

9p

…

802

net: Kill dev_rebuild_header

2015-03-02 16:43:41 -05:00

8021q

…

appletalk

…

atm

net: atm: Fix potential Spectre v1

2018-05-16 10:06:51 +02:00

ax25

…

batman-adv

batman-adv: fix packet loss for broadcasted DHCP packets to a server

2018-05-30 07:49:06 +02:00

bluetooth

Bluetooth: Fix connection if directed advertising and privacy is used

2018-07-03 11:21:35 +02:00

bridge

netfilter: ebtables: reject non-bridge targets

2018-07-22 14:25:54 +02:00

caif

net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx

2017-07-05 14:37:14 +02:00

can

can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once

2018-01-31 12:06:08 +01:00

ceph

libceph: validate con->state at the top of try_write()

2018-05-02 07:53:42 -07:00

core

rtnetlink: add rtnl_link_state check in rtnl_configure_link

2018-07-28 07:45:02 +02:00

dcb

net/dcb: make dcbnl.c explicitly non-modular

2015-10-09 07:52:27 -07:00

dccp

net: dccp: switch rx_tstamp_last_feedback to monotonic clock

2018-07-22 14:25:52 +02:00

decnet

dn_getsockoptdecnet: move nf_{get/set}sockopt outside sock lock

2018-02-25 11:03:38 +01:00

dns_resolver

KEYS: DNS: fix parsing multiple options

2018-07-22 14:25:54 +02:00

dsa

net: dsa: Do not suspend/resume closed slave_dev

2018-08-06 16:24:41 +02:00

ethernet

…

hsr

…

ieee802154

…

ipv4

ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV

2018-08-15 17:42:05 +02:00

ipv6

ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV

2018-08-15 17:42:05 +02:00

ipx

…

irda

…

iucv

…

key

af_key: Always verify length of provided sadb_key

2018-06-16 09:54:25 +02:00

l2tp

l2tp: revert "l2tp: fix missing print session offset info"

2018-05-26 08:48:50 +02:00

l3mdev

…

lapb

…

llc

llc: properly handle dev_queue_xmit() return value

2018-05-30 07:49:06 +02:00

mac80211

…

mac802154

…

mpls

…

netfilter

netfilter: nf_queue: augment nfqa_cfg_policy

2018-07-17 11:31:46 +02:00

netlabel

netlabel: If PF_INET6, check sk_buff ip header version

2018-05-30 07:49:17 +02:00

netlink

netlink: Don't shift on 64 for ngroups

2018-08-09 12:19:28 +02:00

netrom

…

nfc

net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL.

2018-07-22 14:25:54 +02:00

openvswitch

openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found

2018-05-26 08:48:47 +02:00

packet

packet: fix reserve calculation

2018-06-13 16:15:28 +02:00

phonet

…

rds

rds: avoid unenecessary cong_update in loop transport

2018-07-22 14:25:54 +02:00

rfkill

rfkill: gpio: fix memory leak in probe error path

2018-05-16 10:06:51 +02:00

rose

…

rxrpc

…

sched

net_sched: blackhole: tell upper qdisc about dropped packets

2018-07-22 14:25:53 +02:00

sctp

sctp: delay the authentication for the duplicated cookie-echo chunk

2018-05-26 08:48:49 +02:00

sunrpc

rpc_pipefs: fix double-dput()

2018-04-24 09:32:11 +02:00

switchdev

…

tipc

…

unix

…

vmw_vsock

…

wimax

…

wireless

cfg80211: limit wiphy names to 128 bytes

2018-05-26 08:49:00 +02:00

x25

…

xfrm

xfrm: skip policies marked as dead while rehashing

2018-07-03 11:21:32 +02:00

compat.c

net: support compat 64-bit time in {s,g}etsockopt

2018-05-26 08:48:47 +02:00

Kconfig

…

Makefile

net: Introduce L3 Master device abstraction

2015-09-29 20:40:32 -07:00

socket.c

net: socket: fix potential spectre v1 gadget in socketcall

2018-08-06 16:24:42 +02:00

sysctl_net.c

net: Use ns_capable_noaudit() when determining net sysctl permissions

2016-09-15 08:27:50 +02:00