]> git.ipfire.org Git - thirdparty/strongswan.git/commit
projects / thirdparty / strongswan.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c632aa7) | patch
save-keys: Add support for full-length HMAC-SHA256 for ESP
authorMichał Skalski <mskalski13@gmail.com>
Mon, 22 Feb 2021 15:41:23 +0000 (16:41 +0100)
committerTobias Brunner <tobias@strongswan.org>
Tue, 23 Feb 2021 16:28:46 +0000 (17:28 +0100)
commitb6b8880340ea349f416666edf94f491fe1cdd4aa
treea900561e5ec61e3c263040ffb148c3314a2adb92tree
parentc632aa7b31daebc3cd00f962b93167e3e66fecbccommit | diff
save-keys: Add support for full-length HMAC-SHA256 for ESP

Wireshark doesn't really support it, but this way it at least decodes
the ESP packets correctly and the encryption keys are saved and the
packets can be decrypted.  The full-length versions of SHA-384 and
SHA-512 are not supported by Wireshark as 256-bit is the longest ICV
it is able to decode currently.
src/libcharon/plugins/save_keys/save_keys_listener.c diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.