Wireshark · Wireshark-commits: [Wireshark-commits] rev 29121: /trunk/epan/dissectors/ /trunk/epan/dissectors/: packet-ipsec.c

[jake@xxxxxxxxxxxxx]

http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=29121

User: jake
Date: 2009/07/16 12:57 PM

Log:
 From David Dahlberg:
 As for now, Wireshark supports only 96-bit (or 0-bit for NULL authentication)
 integrity control values (ICVs) for IPsec ESP. While the autentication field is
 of variable length, this may lead to situations where the whole packet is not
 parsable.
 
 To solve this, I added generic classes (not checked) for 128, 192 and 256 bit
 ICVs to the ESP dissector. I also split the HMAC-SHA-256 autentication
 algorithm to HMAC-SHA-256-128 (128 bit as defined in RFC 4868) and
 HMAC-SHA-256-96 (from the very first draft, nevertheless unpatched Linux and
 BSDs do it this way).

Directory: /trunk/epan/dissectors/
  Changes    Path              Action
  +58 -12    packet-ipsec.c    Modified