Thomas Egerer e424bee248 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV ...

commit 32b6170ca5 upstream.

The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
to select CRYPTO_ECHAINIV in order to work properly. This solves the
issues caused by a misconfiguration as described in [1].
The original approach, patching crypto/Kconfig was turned down by
Herbert Xu [2].

[1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
[2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2

Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Cc: Yongqin Liu <yongqin.liu@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-08-15 17:42:05 +02:00

..

netfilter

netfilter: x_tables: initialise match/target check parameter struct

2018-07-17 11:31:46 +02:00

addrconf_core.c

…

addrconf.c

ipv6: avoid dad-failures for addresses with NODAD

2018-04-13 19:50:06 +02:00

addrlabel.c

…

af_inet6.c

net: reevalulate autoflowlabel setting after sysctl setting

2018-01-02 20:33:25 +01:00

ah6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:50:23 +02:00

anycast.c

…

datagram.c

ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull

2018-07-28 07:45:03 +02:00

esp6.c

ipsec: check return value of skb_to_sgvec always

2018-04-13 19:50:23 +02:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

…

fib6_rules.c

…

icmp.c

…

ila.c

…

inet6_connection_sock.c

…

inet6_hashtables.c

…

ip6_checksum.c

udplite: fix partial checksum initialization

2018-03-11 16:19:46 +01:00

ip6_fib.c

…

ip6_flowlabel.c

ipv6: flowlabel: do not leave opt->tot_len with garbage

2017-11-18 11:11:06 +01:00

ip6_gre.c

ip6_gre: better validate user provided tunnel names

2018-04-13 19:50:26 +02:00

ip6_icmp.c

…

ip6_input.c

…

ip6_offload.c

…

ip6_offload.h

…

ip6_output.c

ip: hash fragments consistently

2018-07-28 07:45:02 +02:00

ip6_tunnel.c

ip6_tunnel: better validate user provided tunnel names

2018-04-13 19:50:27 +02:00

ip6_udp_tunnel.c

…

ip6_vti.c

vti6: better validate user provided tunnel names

2018-04-13 19:50:27 +02:00

ip6mr.c

ip6mr: only set ip6mr_table from setsockopt when ip6mr_new_table succeeds

2018-06-13 16:15:28 +02:00

ipcomp6.c

…

ipv6_sockglue.c

netfilter: drop outermost socket lock in getsockopt()

2018-02-28 10:17:21 +01:00

Kconfig

ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV

2018-08-15 17:42:05 +02:00

Makefile

…

mcast_snoop.c

…

mcast.c

ipv6: mcast: better catch silly mtu values

2018-01-02 20:33:24 +01:00

mip6.c

…

ndisc.c

ipv6: fix access to non-linear packet in ndisc_fill_redirect_hdr_option()

2018-03-31 18:12:33 +02:00

netfilter.c

…

output_core.c

…

ping.c

…

proc.c

…

protocol.c

…

raw.c

…

reassembly.c

…

route.c

ipv6: add RTA_TABLE and RTA_PREFSRC to rtm_ipv6_policy

2018-04-29 07:50:06 +02:00

sit.c

Revert "sit: reload iphdr in ipip6_rcv"

2018-07-22 14:25:52 +02:00

syncookies.c

…

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp: verify the checksum of the first data segment in a new connection

2018-07-03 11:21:25 +02:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

…

udp_offload.c

…

udp.c

…

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

…

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

…

xfrm6_output.c

…

xfrm6_policy.c

xfrm6: avoid potential infinite loop in _decode_session6()

2018-07-03 11:21:24 +02:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…