From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 15 Sep 2018 15:06:05 +0000 (+0100)
Subject: vpn: Poly1305 is AEAD
X-Git-Tag: 010~111
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=831e35971d9257e4bad809163d93636cf2cb6467;p=network.git

vpn: Poly1305 is AEAD

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/functions/functions.vpn-security-policies b/src/functions/functions.vpn-security-policies
index db6e859a..8486617d 100644
--- a/src/functions/functions.vpn-security-policies
+++ b/src/functions/functions.vpn-security-policies
@@ -1022,7 +1022,16 @@ vpn_security_policies_cipher_is_aead() {
 	local cipher=${1}
 
 	# All CCM and GCM ciphers are AEAD
-	string_match "[CG]CM" "${cipher}"
+	if string_match "[CG]CM" "${cipher}"; then
+		return ${EXIT_TRUE}
+	fi
+
+	# Poly1305 is AEAD
+	if string_match "POLY1305" "${cipher}"; then
+		return ${EXIT_TRUE}
+	fi
+
+	return ${EXIT_FALSE}
 }
 
 vpn_security_policies_make_ike_proposal() {