[strongSwan] AES-GCM for ESP

Joshua Liebow-Feeser joshlf13 at gmail.com
Wed Jul 8 01:05:26 CEST 2015


You mean just cd into that directory and then run *sudo modprobe tcrypt
alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3*?

On Tue, Jul 7, 2015 at 4:01 PM, Randy Wyatt <rwwyatt01 at gmail.com> wrote:

> Sometimes try loading the module from the directory
> cd /lib/modules/3.13.0-55-generic/kernel/crypto
>
> and then do your modprobe.
>
> I see this problem with other modules quite frequently.
>
> On Tue, Jul 7, 2015 at 3:58 PM, Joshua Liebow-Feeser <joshlf13 at gmail.com>
> wrote:
>
>> Yep - 3.13.0-55.
>>
>> On Tue, Jul 7, 2015 at 3:55 PM, Randy Wyatt <rwwyatt01 at gmail.com> wrote:
>>
>>> is 3.13.0-55 your running kernel or an older kernel.  Ubuntu is up to 57
>>> at least.  The module build and kernel version has to match.
>>>
>>> On Tue, Jul 7, 2015 at 3:47 PM, Noel Kuntze <noel at familie-kuntze.de>
>>> wrote:
>>>
>>>>
>>>> -----BEGIN PGP SIGNED MESSAGE-----
>>>> Hash: SHA256
>>>>
>>>> Hello Joshua,
>>>>
>>>> Look in the wiki article about pcrypt[1].
>>>>
>>>> [1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
>>>>
>>>> Mit freundlichen Grüßen/Kind Regards,
>>>> Noel Kuntze
>>>>
>>>> GPG Key ID: 0x63EC6658
>>>> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>>>>
>>>> Am 08.07.2015 um 00:37 schrieb Joshua Liebow-Feeser:
>>>> > OK, I'll try that. What would be the invocation to load the drivers
>>>> equivalent to the *modprobe* command that I used?
>>>> >
>>>> > On Tue, Jul 7, 2015 at 2:21 PM, Noel Kuntze <noel at familie-kuntze.de
>>>> <mailto:noel at familie-kuntze.de>> wrote:
>>>> >
>>>> >
>>>> > Hello Joshua,
>>>> >
>>>> > Well, try to use crconf instead.
>>>> > Load the crypto_user module before using crconf.
>>>> > Look at the PKGBUILD[1] for the crconf package for Arch Linux
>>>> > for hints towards building it
>>>> >
>>>> > [1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
>>>> >
>>>> > Mit freundlichen Grüßen/Kind Regards,
>>>> > Noel Kuntze
>>>> >
>>>> > GPG Key ID: 0x63EC6658
>>>> > Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>>>> >
>>>> > Am 07.07.2015 um 23:17 schrieb Joshua Liebow-Feeser:
>>>> > > Hi,
>>>> >
>>>> > > I'm trying to set up strongSwan to use AES-GCM as the encryption
>>>> algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
>>>> pcrypt, but whenever I try to instantiate the proper kernel support, I get
>>>> errors:
>>>> >
>>>> > > $ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
>>>> > > FATAL: Error inserting tcrypt
>>>> (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
>>>> module, or unknown parameter (see dmesg)
>>>> > > $ dmesg | tail -n 1
>>>> > > [...] tcrypt: one or more tests failed!
>>>> >
>>>> > > Any idea what's going on here or how I could fix it? Thanks!
>>>> > > Cheers,
>>>> > > Josh
>>>> >
>>>> >
>>>> > > _______________________________________________
>>>> > > Users mailing list
>>>> > > Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
>>>> > > https://lists.strongswan.org/mailman/listinfo/users
>>>> >
>>>> >
>>>> >
>>>>
>>>> -----BEGIN PGP SIGNATURE-----
>>>> Version: GnuPG v2
>>>>
>>>> iQIcBAEBCAAGBQJVnFcUAAoJEDg5KY9j7GZYk/IP/31w8BViHAnw95i6prG0hlQr
>>>> Hf9q0/9FYcuwiPxhbk2KXAcY9HFy5lZyXY7W7xT0dWeEYzwK9lbxersSnnHkNihK
>>>> 360f3TOSYJKEMqRMsNHjnJTYO0HCjLQ6XxrW4j19pzqbgyni3zgTnr4GM05WfjYD
>>>> +0PiXZ8AGyHQW6wrZgKQkAIuRBia+xiBl1DeOoUKEF168b7NiaXh/pLSDbj0k//4
>>>> lXo2xrInmNMxQPyoGDpDhh++2yJ7qmF85SfOm8DSEJnjArB+Ww+N2EJh902jIcUR
>>>> wYAxSv90g+mqC1iCQvE27tPwGsamkF6Yi/819p0jV/bGUvoqbhizHEoW46JlDBJt
>>>> z5NR9lRqxalTMA1+DG8ws+AVVn5A/UWEpczOZiD6oFwkTWfuW0VXwV7Szq9qIcIk
>>>> I+4iaHdT4pp31f+d2UQ87dZhjWttWzAmo84Eg+KjuC2jw0k+BKCv8gBsAd8oBiD7
>>>> FzWFy+yhGhl1UzCnWKzFswCmV75/TMExxM5s4SetfAwZmb5cur9Z4PvCCwWz/qsj
>>>> nYf0qj9x6A4gpDJGB4WBG4QcOjYeCYgm8+2ctq4ll+840Ai2KsDMUZReEAssLoo9
>>>> 9+zb4dB2tSEjlS18VYxiBwWSoX1CI8SL3W0u9BA9WN8A+PY/Ktx3CVNy/iF3S8eJ
>>>> yJ/PaSpzJPO0XBPBC7pX
>>>> =0Y8/
>>>> -----END PGP SIGNATURE-----
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at lists.strongswan.org
>>>> https://lists.strongswan.org/mailman/listinfo/users
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150707/7e929efb/attachment.html>


More information about the Users mailing list