xfrm: Add basic infrastructure to support IPsec extended sequence numbers
authorSteffen Klassert <steffen.klassert@secunet.com>
Tue, 8 Mar 2011 00:05:43 +0000 (00:05 +0000)
committerDavid S. Miller <davem@davemloft.net>
Mon, 14 Mar 2011 03:22:28 +0000 (20:22 -0700)
commit9736acf395d3608583a7be70f62800b494fa103c
treeef7b50bb74a7e6a0d93f962cc7a4c98dd18c2caa
parenta5079d084f8be781aae8a635cab4b179cfea4ebd
xfrm: Add basic infrastructure to support IPsec extended sequence numbers

This patch adds the struct xfrm_replay_state_esn which will be
used to support IPsec extended sequence numbers and anti replay windows
bigger than 32 packets. Also we add a function that returns the actual
size of the xfrm_replay_state_esn, a xfrm netlink atribute and a xfrm state
flag for the use of extended sequence numbers.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/xfrm.h
include/net/xfrm.h