print-esp, AES

[Michael Richardson <mcr () sandelman ottawa on ca>]

Itojun changed print-esp.c to look up crypto routines using
EVP_get_byname() instead of having a table.

The problem with that is that the ivlen differs for different
algorithms. This is easily solved by calling EVP_CIPHER_iv_length(evp);

I'm commit this code to HEAD.

With that, I can decrypt AES256 packets generated by Openswan.

--
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr () xelerance com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [


-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.