IEEE 802.1AE-2006 standard recommends that the ICV element in a MACsec frame should not exceed 16 octets: add MACSEC_STD_ICV_LEN in uapi definitions accordingly, and avoid accepting configurations where the ICV length exceeds the standard value. Leave definition of MACSEC_MAX_ICV_LEN unchanged for backwards compatibility with userspace programs.
Showing the changes to include/uapi (1 of 2 files). Show all
Unified · Split
| @@ -26,6 +26,8 @@ · 25 unmodified lines | |||
| 26 | 26 | ||
| 27 | #define MACSEC_MIN_ICV_LEN 8 | 27 | #define MACSEC_MIN_ICV_LEN 8 |
| 28 | #define MACSEC_MAX_ICV_LEN 32 | 28 | #define MACSEC_MAX_ICV_LEN 32 |
| 29 | /* upper limit for ICV length as recommended by IEEE802.1AE-2006 */ | ||
| 30 | #define MACSEC_STD_ICV_LEN 16 | ||
| 29 | 31 | ||
| 30 | enum macsec_attrs { | 32 | enum macsec_attrs { |
| 31 | MACSEC_ATTR_UNSPEC, | 33 | MACSEC_ATTR_UNSPEC, |