Re: linux-ipsec: ERROR_MESSAGES: spi invalid key message needs to be better.

> > spi: Invalid encryption key: 0cabcdefghABCDEFGHabcdefgh

Nope, a 0c prefix is a character key, not a hex key (which would start with 0x). However, this feature is only hours old and I think Hugh just has an out-of-date binary.

> The spec also requires the parity to be right, so if that's

Human-readable DES keys really ought to be 7 bytes, with the parity bits solely a matter for drivers and hardware. Unfortunately, we lost that battle a long time ago, so we use the next best thing -- 8 bytes with one bit of each byte ignored. That is, no, incorrect parity will not cause a rejection.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)