[strongSwan] AES-GCM for ESP

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Joshua,

Look in the wiki article about pcrypt[1].

[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 08.07.2015 um 00:37 schrieb Joshua Liebow-Feeser:
> OK, I'll try that. What would be the invocation to load the drivers equivalent to the *modprobe* command that I used?
>
> On Tue, Jul 7, 2015 at 2:21 PM, Noel Kuntze <noel at familie-kuntze.de <mailto:noel at familie-kuntze.de>> wrote:
>
>
> Hello Joshua,
>
> Well, try to use crconf instead.
> Load the crypto_user module before using crconf.
> Look at the PKGBUILD[1] for the crconf package for Arch Linux
> for hints towards building it
>
> [1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
>
> Mit freundlichen Grüßen/Kind Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>
> Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
> > Hi,
>
> > I'm trying to set up strongSwan to use AES-GCM as the encryption algorithm for ESP. I'd like this to be parallelized, so I'm trying to use pcrypt, but whenever I try to instantiate the proper kernel support, I get errors:
>
> > $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
> > FATAL: Error inserting tcrypt (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in module, or unknown parameter (see dmesg)
> > $ dmesg | tail -n 1
> > [...] tcrypt: one or more tests failed!
>
> > Any idea what's going on here or how I could fix it? Thanks!
> > Cheers,
> > Josh
>
>
> > _______________________________________________
> > Users mailing list
> > Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
> > https://lists.strongswan.org/mailman/listinfo/users
>
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=0Y8/
-----END PGP SIGNATURE-----