[strongSwan] AES-GCM for ESP

Noel Kuntze noel at familie-kuntze.de
Tue Jul 7 23:21:41 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Joshua,

Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it

[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
> Hi,
>
> I'm trying to set up strongSwan to use AES-GCM as the encryption algorithm for ESP. I'd like this to be parallelized, so I'm trying to use pcrypt, but whenever I try to instantiate the proper kernel support, I get errors:
>
> $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
> FATAL: Error inserting tcrypt (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in module, or unknown parameter (see dmesg)
> $ dmesg | tail -n 1
> [...] tcrypt: one or more tests failed!
>
> Any idea what's going on here or how I could fix it? Thanks!
> Cheers,
> Josh
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=GOOL
-----END PGP SIGNATURE-----



More information about the Users mailing list