strongswan/src/libipsec
Martin Willi e5d73b0dfa aead: Support custom AEAD salt sizes
The salt, or often called implicit nonce, varies between AEAD algorithms and
their use in protocols. For IKE and ESP, GCM uses 4 bytes, while CCM uses
3 bytes. With TLS, however, AEAD mode uses 4 bytes for both GCM and CCM.

Our GCM backends currently support 4 bytes and CCM 3 bytes only. This is fine
until we go for CCM mode support in TLS, which requires 4 byte nonces.
2014-03-31 15:56:12 +02:00
..
Android.mk android: Remove dependency on libvstr 2013-11-13 11:40:47 +01:00
Makefile.am Build all shared libraries with -no-undefined and link them properly 2013-09-12 01:44:49 +02:00
esp_context.c aead: Support custom AEAD salt sizes 2014-03-31 15:56:12 +02:00
esp_context.h libipsec: Wrap traditional algorithms in AEAD wrapper 2013-05-03 15:13:57 +02:00
esp_packet.c libipsec: Don't print ciphertext with ICV in log message 2013-10-17 11:43:58 +02:00
esp_packet.h ipsec: Use IV generator to encrypt ESP messages 2013-10-11 15:55:40 +02:00
ip_packet.c libipsec: remove extra RFC4303 TFC padding appended to inner payload 2013-10-11 10:23:17 +02:00
ip_packet.h Moved packet_t and tun_device_t to networking folder 2012-10-24 15:06:18 +02:00
ipsec.c Moved debug.[ch] to utils folder 2012-10-24 16:00:51 +02:00
ipsec.h Added IPsec processor which is responsible for handling in- and outbound packets 2012-08-08 15:41:03 +02:00
ipsec_event_listener.h Added class to relay IPsec events (like expiration) to listeners 2012-08-08 15:41:03 +02:00
ipsec_event_relay.c libipsec: Fix memory leak in event relay 2013-05-03 16:02:39 +02:00
ipsec_event_relay.h Added class to relay IPsec events (like expiration) to listeners 2012-08-08 15:41:03 +02:00
ipsec_policy.c Moved debug.[ch] to utils folder 2012-10-24 16:00:51 +02:00
ipsec_policy.h Moved host_t and host_resolver_t to a new networking subfolder 2012-10-24 15:06:18 +02:00
ipsec_policy_mgr.c libipsec: check for a policy with the reqid of the SA on decapsulation 2013-09-13 13:56:43 +02:00
ipsec_policy_mgr.h libipsec: check for a policy with the reqid of the SA on decapsulation 2013-09-13 13:56:43 +02:00
ipsec_processor.c libipsec: Support usage statistics and query_sa() on IPsec SAs 2013-10-11 10:23:17 +02:00
ipsec_processor.h Added IPsec processor which is responsible for handling in- and outbound packets 2012-08-08 15:41:03 +02:00
ipsec_sa.c libipsec: Enforce byte/packet lifetimes on SAs 2013-10-11 10:23:18 +02:00
ipsec_sa.h libipsec: Enforce byte/packet lifetimes on SAs 2013-10-11 10:23:18 +02:00
ipsec_sa_mgr.c libipsec: Enforce byte/packet lifetimes on SAs 2013-10-11 10:23:18 +02:00
ipsec_sa_mgr.h libipsec: Support usage statistics and query_sa() on IPsec SAs 2013-10-11 10:23:17 +02:00