[strongSwan] AES-GCM for ESP

[Joshua Liebow-Feeser]

OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?

On Tue, Jul 7, 2015 at 2:21 PM, Noel Kuntze <noel at familie-kuntze.de> wrote:

>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hello Joshua,
>
> Well, try to use crconf instead.
> Load the crypto_user module before using crconf.
> Look at the PKGBUILD[1] for the crconf package for Arch Linux
> for hints towards building it
>
> [1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
>
> Mit freundlichen Grüßen/Kind Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>
> Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
> > Hi,
> >
> > I'm trying to set up strongSwan to use AES-GCM as the encryption
> algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
> pcrypt, but whenever I try to instantiate the proper kernel support, I get
> errors:
> >
> > $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
> > FATAL: Error inserting tcrypt
> (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
> module, or unknown parameter (see dmesg)
> > $ dmesg | tail -n 1
> > [...] tcrypt: one or more tests failed!
> >
> > Any idea what's going on here or how I could fix it? Thanks!
> > Cheers,
> > Josh
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.strongswan.org
> > https://lists.strongswan.org/mailman/listinfo/users
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCAAGBQJVnELjAAoJEDg5KY9j7GZYpsIQAJ91IxIwWrlAI4Oyz//ynEM7
> JyJR0oQy8+7FSETMCJK3LFZM7oaKpVAXLNofdIBsLUzVX4z3V654/I7FzOXhWly6
> sgLdMAB61gtrar83LZNrB8f287ryu1EmD7aKaPYt4M7irMwJFEqjndEGg1wQGkgp
> 2kGkDEmM9c+V9kdGKHIaPkyAAmcGWy3afhyNm0dDRbC+KJzFBaa7xQ6hnAsqP6rQ
> B71TWDE6vTKsYNsk/cJxXMz3T/AC08fcqOxyLm3O647ccHeBZeAKaNWHulKMX7+h
> iBV0Tr36FZtPaRG0uUu9niIAtkWxXJDQwOTiumwZ6cSLQ18gMaETpL2ToRy78JbE
> H8Tl1ZZ/ivLTic+N82o1QYQSqIjItuRo+Rj+rVakr4oBb8RtSJ54wfY13HmW3pur
> Dw/kB6dSXLCtJi4tUFn9CQfgkC4pqVQBd4ANk0e/otRluvoVpcmDiD7w53K7xGo3
> Mc/v/UwFphcu2tX/Wp8ZbedY/Iz+/T9Prg8EOsAoCgSifUBQe6Z8eoAMCoR1EUxj
> XysAg6p3ClhpMtCF1Ymv+Lf2s+S8hKMjTsUtWZnWDi0+W1aCKjz2kCgA/acgC2JR
> RU9/wRXsI0gMHRLbMmdPavhcYcF4HDKN8xigqEnd2iA+cw18hpBkzUz6HH/77g15
> NWY3qWk/NoI+wD3hWP2e
> =GOOL
> -----END PGP SIGNATURE-----
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150707/664a7599/attachment-0001.html>