From f48f19063561639d65b76f241f17f0704ba69644 Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Thu, 21 May 2020 11:13:56 +0200 Subject: macsec: T2023: remove gcm-aes-256 cipher type Cipher type gcm-aes-256 is supported by Linux 4.19 but it is not available in iproute2 4.19. We could backport it of course but the plan is to Upgrade to a more recent 5.x series kernel anyway once all out-of-tree module issues are resolved, mainly Intel QAT. gcm-aes-256 support was added to iproute2 package with commit b16f5253233 ("Add support for configuring MACsec gcm-aes-256 cipher type.") which made it into the 5.2 release of iproute2. --- interface-definitions/interfaces-macsec.xml.in | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/interface-definitions/interfaces-macsec.xml.in b/interface-definitions/interfaces-macsec.xml.in index 13448e758..f16760112 100644 --- a/interface-definitions/interfaces-macsec.xml.in +++ b/interface-definitions/interfaces-macsec.xml.in @@ -19,20 +19,16 @@ #include - Cipher suite used (default: gcm-aes-128) + Cipher suite used - gcm-aes-128 gcm-aes-256 + gcm-aes-128 gcm-aes-128 Galois/Counter Mode of AES cipher with 128-bit key (default) - - gcm-aes-256 - Galois/Counter Mode of AES cipher with 256-bit key - - (gcm-aes-128|gcm-aes-256) + (gcm-aes-128) -- cgit v1.2.3