Steffen Klassert says: ==================== pull request (net-next): ipsec-next 2022-01-06 1) Fix some clang_analyzer warnings about never read variables. From luo penghao. 2) Check for pols[0] only once in xfrm_expand_policies(). From Jean Sacren. 3) The SA curlft.use_time was updated only on SA cration time. Update whenever the SA is used. From Antony Antony 4) Add support for SM3 secure hash. From Xu Jia. 5) Add support for SM4 symmetric cipher algorithm. From Xu Jia. 6) Add a rate limit for SA mapping change messages. From Antony Antony. ====================
Showing the changes to include/uapi (2 of 11 files). Show all
Unified · Split
| @@ -309,6 +309,7 @@ struct sadb_x_filter { · 308 unmodified lines | |||
| 309 | #define SADB_X_AALG_SHA2_512HMAC 7 | 309 | #define SADB_X_AALG_SHA2_512HMAC 7 |
| 310 | #define SADB_X_AALG_RIPEMD160HMAC 8 | 310 | #define SADB_X_AALG_RIPEMD160HMAC 8 |
| 311 | #define SADB_X_AALG_AES_XCBC_MAC 9 | 311 | #define SADB_X_AALG_AES_XCBC_MAC 9 |
| 312 | #define SADB_X_AALG_SM3_256HMAC 10 | ||
| 312 | #define SADB_X_AALG_NULL 251 /* kame */ | 313 | #define SADB_X_AALG_NULL 251 /* kame */ |
| 313 | #define SADB_AALG_MAX 251 | 314 | #define SADB_AALG_MAX 251 |
| 314 | 315 | ||
| @@ -329,6 +330,7 @@ struct sadb_x_filter { · 14 unmodified lines | |||
| 329 | #define SADB_X_EALG_AES_GCM_ICV16 20 | 330 | #define SADB_X_EALG_AES_GCM_ICV16 20 |
| 330 | #define SADB_X_EALG_CAMELLIACBC 22 | 331 | #define SADB_X_EALG_CAMELLIACBC 22 |
| 331 | #define SADB_X_EALG_NULL_AES_GMAC 23 | 332 | #define SADB_X_EALG_NULL_AES_GMAC 23 |
| 333 | #define SADB_X_EALG_SM4CBC 24 | ||
| 332 | #define SADB_EALG_MAX 253 /* last EALG */ | 334 | #define SADB_EALG_MAX 253 /* last EALG */ |
| 333 | /* private allocations should use 249-255 (RFC2407) */ | 335 | /* private allocations should use 249-255 (RFC2407) */ |
| 334 | #define SADB_X_EALG_SERPENTCBC 252 /* draft-ietf-ipsec-ciph-aes-cbc-00 */ | 336 | #define SADB_X_EALG_SERPENTCBC 252 /* draft-ietf-ipsec-ciph-aes-cbc-00 */ |
| @@ -313,6 +313,7 @@ enum xfrm_attr_type_t { · 312 unmodified lines | |||
| 313 | XFRMA_SET_MARK, /* __u32 */ | 313 | XFRMA_SET_MARK, /* __u32 */ |
| 314 | XFRMA_SET_MARK_MASK, /* __u32 */ | 314 | XFRMA_SET_MARK_MASK, /* __u32 */ |
| 315 | XFRMA_IF_ID, /* __u32 */ | 315 | XFRMA_IF_ID, /* __u32 */ |
| 316 | XFRMA_MTIMER_THRESH, /* __u32 in seconds for input SA */ | ||
| 316 | __XFRMA_MAX | 317 | __XFRMA_MAX |
| 317 | 318 | ||
| 318 | #define XFRMA_OUTPUT_MARK XFRMA_SET_MARK /* Compatibility */ | 319 | #define XFRMA_OUTPUT_MARK XFRMA_SET_MARK /* Compatibility */ |