Description

Some encryption algorithms does not work in VPP

Supported cryptographic algorithms for encryption:

aes-cbc-128
aes-cbc-192
aes-cbc-256
aes-ctr-128
aes-ctr-192
aes-ctr-256
aes-gcm-128 (128 bit ICV)
aes-gcm-192 (128 bit ICV)
aes-gcm-256 (128 bit ICV)
des-cbc
3des-cbc

But with XFRM module it has more limitations
https://github.com/MarvellEmbeddedProcessors/vpp/blob/stable/2402/src/plugins/linux-cp/README#L145

Details

Version: -
Is it a breaking change?: Perfectly compatible
Issue type: Bug (incorrect behavior)

Related Objects

Mentioned In: rVYOSONEX42f33f0bd5cf: Merge pull request #4389 from natali-rs1985/T7242
rVYOSONEX159fcbf0c363: ipsec: T7242: Add check for encryption algorithms that do not work with VPP

Event Timeline

natali-rs1985 created this task.Mar 13 2025, 11:37 AM

pasik subscribed.Mar 13 2025, 12:20 PM

https://github.com/vyos/vyos-1x/pull/4389

natali-rs1985 updated the task description. (Show Details)Mar 13 2025, 12:46 PM

natali-rs1985 updated the task description. (Show Details)

natali-rs1985 mentioned this in rVYOSONEX159fcbf0c363: ipsec: T7242: Add check for encryption algorithms that do not work with VPP.Thu, Mar 13, 3:22 PM

Restricted Repository Identity mentioned this in rVYOSONEX42f33f0bd5cf: Merge pull request #4389 from natali-rs1985/T7242.Thu, Mar 13, 3:22 PM

dmbaturin renamed this task from Check use cases for IPsec that do not work with VPP to Add a check for unsupported encryption algorithms to VPP IPsec.Tue, Mar 25, 10:34 PM

dmbaturin changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).

Viacheslav closed this task as Resolved.Wed, Mar 26, 8:02 AM

Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.

Add a check for unsupported encryption algorithms to VPP IPsecClosed, ResolvedPublicActions

Description

Details

Related Objects

Event Timeline

Add a check for unsupported encryption algorithms to VPP IPsec
Closed, ResolvedPublic
Actions