[strongSwan] AES-GCM for ESP

[Joshua Liebow-Feeser]

Ah, thanks! Unfortunately, it doesn't work:
$ sudo ./crconf add driver 'pcrypt(rfc4106(gcm(aes-aesni)))' type 3
RTNETLINK answers: No such file or directory

Does that mean that the algorithm isn't supported or something?

On Tue, Jul 7, 2015 at 3:47 PM, Noel Kuntze <noel at familie-kuntze.de> wrote:

>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hello Joshua,
>
> Look in the wiki article about pcrypt[1].
>
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
>
> Mit freundlichen Grüßen/Kind Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>
> Am 08.07.2015 um 00:37 schrieb Joshua Liebow-Feeser:
> > OK, I'll try that. What would be the invocation to load the drivers
> equivalent to the *modprobe* command that I used?
> >
> > On Tue, Jul 7, 2015 at 2:21 PM, Noel Kuntze <noel at familie-kuntze.de
> <mailto:noel at familie-kuntze.de>> wrote:
> >
> >
> > Hello Joshua,
> >
> > Well, try to use crconf instead.
> > Load the crypto_user module before using crconf.
> > Look at the PKGBUILD[1] for the crconf package for Arch Linux
> > for hints towards building it
> >
> > [1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
> >
> > Mit freundlichen Grüßen/Kind Regards,
> > Noel Kuntze
> >
> > GPG Key ID: 0x63EC6658
> > Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
> >
> > Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
> > > Hi,
> >
> > > I'm trying to set up strongSwan to use AES-GCM as the encryption
> algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
> pcrypt, but whenever I try to instantiate the proper kernel support, I get
> errors:
> >
> > > $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
> > > FATAL: Error inserting tcrypt
> (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
> module, or unknown parameter (see dmesg)
> > > $ dmesg | tail -n 1
> > > [...] tcrypt: one or more tests failed!
> >
> > > Any idea what's going on here or how I could fix it? Thanks!
> > > Cheers,
> > > Josh
> >
> >
> > > _______________________________________________
> > > Users mailing list
> > > Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
> > > https://lists.strongswan.org/mailman/listinfo/users
> >
> >
> >
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCAAGBQJVnFcUAAoJEDg5KY9j7GZYk/IP/31w8BViHAnw95i6prG0hlQr
> Hf9q0/9FYcuwiPxhbk2KXAcY9HFy5lZyXY7W7xT0dWeEYzwK9lbxersSnnHkNihK
> 360f3TOSYJKEMqRMsNHjnJTYO0HCjLQ6XxrW4j19pzqbgyni3zgTnr4GM05WfjYD
> +0PiXZ8AGyHQW6wrZgKQkAIuRBia+xiBl1DeOoUKEF168b7NiaXh/pLSDbj0k//4
> lXo2xrInmNMxQPyoGDpDhh++2yJ7qmF85SfOm8DSEJnjArB+Ww+N2EJh902jIcUR
> wYAxSv90g+mqC1iCQvE27tPwGsamkF6Yi/819p0jV/bGUvoqbhizHEoW46JlDBJt
> z5NR9lRqxalTMA1+DG8ws+AVVn5A/UWEpczOZiD6oFwkTWfuW0VXwV7Szq9qIcIk
> I+4iaHdT4pp31f+d2UQ87dZhjWttWzAmo84Eg+KjuC2jw0k+BKCv8gBsAd8oBiD7
> FzWFy+yhGhl1UzCnWKzFswCmV75/TMExxM5s4SetfAwZmb5cur9Z4PvCCwWz/qsj
> nYf0qj9x6A4gpDJGB4WBG4QcOjYeCYgm8+2ctq4ll+840Ai2KsDMUZReEAssLoo9
> 9+zb4dB2tSEjlS18VYxiBwWSoX1CI8SL3W0u9BA9WN8A+PY/Ktx3CVNy/iF3S8eJ
> yJ/PaSpzJPO0XBPBC7pX
> =0Y8/
> -----END PGP SIGNATURE-----
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150707/00134659/attachment.html>