diff options
| author | Luiz Otavio O Souza <luiz@netgate.com> | 2015-09-16 08:15:16 -0500 |
|---|---|---|
| committer | Luiz Otavio O Souza <luiz@netgate.com> | 2015-10-20 12:10:00 -0500 |
| commit | 87917f89b81d1289daae2e25ff274fa49de2e533 (patch) | |
| tree | 043a8fdda34f78f3e7fed10f34c5f730e6faad3d /sys/netipsec | |
| parent | bc17e19fafe6200202458ce3c13db42565f9e966 (diff) | |
| download | FreeBSD-src-87917f89b81d1289daae2e25ff274fa49de2e533.zip FreeBSD-src-87917f89b81d1289daae2e25ff274fa49de2e533.tar.gz | |
MFC r286100:
Clean up this header file...
use CTASSERTs now that we have them...
Replace a draft w/ RFC that's over 10 years old.
Note that _AALG and _EALG do not need to match what the IKE daemons
think they should be.. This is part of the KABI... I decided to
renumber AESCTR, but since we've never had working AESCTR mode, I'm
not really breaking anything.. and it shortens a loop by quite
a bit..
remove SKIPJACK IPsec support... SKIPJACK never made it out of draft
(in 1999), only has 80bit key, NIST recommended it stop being used
after 2010, and setkey nor any of the IKE daemons I checked supported
it...
jmgurney/ipsecgcm: a357a33, c75808b, e008669, b27b6d6
Reviewed by: gnn (earlier version)
TAG: IPSEC-HEAD
Issue: #4841
Diffstat (limited to 'sys/netipsec')
| -rw-r--r-- | sys/netipsec/xform_esp.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/sys/netipsec/xform_esp.c b/sys/netipsec/xform_esp.c index 25acf72..2814193 100644 --- a/sys/netipsec/xform_esp.c +++ b/sys/netipsec/xform_esp.c @@ -113,8 +113,6 @@ esp_algorithm_lookup(int alg) return &enc_xform_blf; case SADB_X_EALG_CAST128CBC: return &enc_xform_cast5; - case SADB_X_EALG_SKIPJACK: - return &enc_xform_skipjack; case SADB_EALG_NULL: return &enc_xform_null; case SADB_X_EALG_CAMELLIACBC: |
