Re: linux-ipsec: broken for a few days...

> I have just implemented ESP-NULL-MD5-96 and am in the process of testing
> it. It will be checked in when it appears to work.

Please make sure that it is not part of the default configuration; e.g. you have to go down into the transforms to turn it on. In fact I would suggest forcing people to change a #define in the source file itself to turn it on.

The friends of NSA are sure working overtime to create as many ways as possible for plaintext to show up in an IPSEC-protected data stream...

        John Received on Fri Aug 7 00:37:17 1998