[strongSwan] AES-GCM for ESP

Joshua Liebow-Feeser joshlf13 at gmail.com
Wed Jul 8 00:58:25 CEST 2015


Yep - 3.13.0-55.

On Tue, Jul 7, 2015 at 3:55 PM, Randy Wyatt <rwwyatt01 at gmail.com> wrote:

> is 3.13.0-55 your running kernel or an older kernel.  Ubuntu is up to 57
> at least.  The module build and kernel version has to match.
>
> On Tue, Jul 7, 2015 at 3:47 PM, Noel Kuntze <noel at familie-kuntze.de>
> wrote:
>
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>> Hello Joshua,
>>
>> Look in the wiki article about pcrypt[1].
>>
>> [1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
>>
>> Mit freundlichen Grüßen/Kind Regards,
>> Noel Kuntze
>>
>> GPG Key ID: 0x63EC6658
>> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>>
>> Am 08.07.2015 um 00:37 schrieb Joshua Liebow-Feeser:
>> > OK, I'll try that. What would be the invocation to load the drivers
>> equivalent to the *modprobe* command that I used?
>> >
>> > On Tue, Jul 7, 2015 at 2:21 PM, Noel Kuntze <noel at familie-kuntze.de
>> <mailto:noel at familie-kuntze.de>> wrote:
>> >
>> >
>> > Hello Joshua,
>> >
>> > Well, try to use crconf instead.
>> > Load the crypto_user module before using crconf.
>> > Look at the PKGBUILD[1] for the crconf package for Arch Linux
>> > for hints towards building it
>> >
>> > [1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
>> >
>> > Mit freundlichen Grüßen/Kind Regards,
>> > Noel Kuntze
>> >
>> > GPG Key ID: 0x63EC6658
>> > Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>> >
>> > Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
>> > > Hi,
>> >
>> > > I'm trying to set up strongSwan to use AES-GCM as the encryption
>> algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
>> pcrypt, but whenever I try to instantiate the proper kernel support, I get
>> errors:
>> >
>> > > $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
>> > > FATAL: Error inserting tcrypt
>> (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
>> module, or unknown parameter (see dmesg)
>> > > $ dmesg | tail -n 1
>> > > [...] tcrypt: one or more tests failed!
>> >
>> > > Any idea what's going on here or how I could fix it? Thanks!
>> > > Cheers,
>> > > Josh
>> >
>> >
>> > > _______________________________________________
>> > > Users mailing list
>> > > Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
>> > > https://lists.strongswan.org/mailman/listinfo/users
>> >
>> >
>> >
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2
>>
>> iQIcBAEBCAAGBQJVnFcUAAoJEDg5KY9j7GZYk/IP/31w8BViHAnw95i6prG0hlQr
>> Hf9q0/9FYcuwiPxhbk2KXAcY9HFy5lZyXY7W7xT0dWeEYzwK9lbxersSnnHkNihK
>> 360f3TOSYJKEMqRMsNHjnJTYO0HCjLQ6XxrW4j19pzqbgyni3zgTnr4GM05WfjYD
>> +0PiXZ8AGyHQW6wrZgKQkAIuRBia+xiBl1DeOoUKEF168b7NiaXh/pLSDbj0k//4
>> lXo2xrInmNMxQPyoGDpDhh++2yJ7qmF85SfOm8DSEJnjArB+Ww+N2EJh902jIcUR
>> wYAxSv90g+mqC1iCQvE27tPwGsamkF6Yi/819p0jV/bGUvoqbhizHEoW46JlDBJt
>> z5NR9lRqxalTMA1+DG8ws+AVVn5A/UWEpczOZiD6oFwkTWfuW0VXwV7Szq9qIcIk
>> I+4iaHdT4pp31f+d2UQ87dZhjWttWzAmo84Eg+KjuC2jw0k+BKCv8gBsAd8oBiD7
>> FzWFy+yhGhl1UzCnWKzFswCmV75/TMExxM5s4SetfAwZmb5cur9Z4PvCCwWz/qsj
>> nYf0qj9x6A4gpDJGB4WBG4QcOjYeCYgm8+2ctq4ll+840Ai2KsDMUZReEAssLoo9
>> 9+zb4dB2tSEjlS18VYxiBwWSoX1CI8SL3W0u9BA9WN8A+PY/Ktx3CVNy/iF3S8eJ
>> yJ/PaSpzJPO0XBPBC7pX
>> =0Y8/
>> -----END PGP SIGNATURE-----
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
>
>
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150707/93dc8339/attachment-0001.html>


More information about the Users mailing list