[FS#916] GCM isn't enabled in kernel by default IPsec config

LEDE Bugs lede-bugs at lists.infradead.org
Thu Jul 20 11:27:13 PDT 2017


The following task has a new comment added:

FS#916 - GCM isn't enabled in kernel by default IPsec config
User who did this - Baptiste Jonglez (bjonglez)

----------
kmod-crypto-gcm does not look that big, feel free to submit a patch: https://git.lede-project.org/?p=source.git;a=blob;f=package/kernel/linux/modules/netsupport.mk;h=6c9b03be1dae1cbe8a4486de610e096e2736c25f;hb=HEAD#l229

This is a good question though: should the ipsec package depend on all possible crypto algorithms?  Looking quickly, it's also missing dependencies on ECB, CTR, CCM, which are potentially useful.  But for space-constrained devices, it makes sense to pull only the minimal amount of dependencies, and users can then install additional crypto packages if needed.
----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=916#comment3029



More information about the lede-bugs mailing list