diff options
| author | David S. Miller <davem@davemloft.net> | 2016-07-25 20:55:40 +0300 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2016-07-25 20:55:40 +0300 |
| commit | 07a01697a2cebcd082b187bcb3bdb1a7204222cb (patch) | |
| tree | cbf6e16e690b6486b9a642a2614846f08da2368e /include | |
| parent | baedbe55884c003819f5c8c063ec3d2569414296 (diff) | |
| parent | f04c392d2dd97a985878f4380a1b054791301acf (diff) | |
| download | linux-07a01697a2cebcd082b187bcb3bdb1a7204222cb.tar.xz | |
Merge branch 'macsec-icv-fixes'
Davide Caratti says:
====================
macsec: fix configurable ICV length
This series provides a fix for macsec configurable ICV length. The
maximum length of ICV element has been made compliant to IEEE 802.1AE,
and error reporting in case of cipher suite configuration failure has been
improved. Finally, a test has been added to netlink verify() callback in
order to avoid creation of macsec interfaces having user-provided ICV length
values that are not supported by the cipher suite.
====================
Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Acked-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
| -rw-r--r-- | include/uapi/linux/if_macsec.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/uapi/linux/if_macsec.h b/include/uapi/linux/if_macsec.h index f7d4831a2cc7..02fc49cb72d8 100644 --- a/include/uapi/linux/if_macsec.h +++ b/include/uapi/linux/if_macsec.h @@ -26,6 +26,8 @@ #define MACSEC_MIN_ICV_LEN 8 #define MACSEC_MAX_ICV_LEN 32 +/* upper limit for ICV length as recommended by IEEE802.1AE-2006 */ +#define MACSEC_STD_ICV_LEN 16 enum macsec_attrs { MACSEC_ATTR_UNSPEC, |