IPsec Status (2): RFC3566

• RFC3566 AES-128-XCBC-96

  • Keyed-MAC algorithm
  • Required for IPv6 Ready Logo Phase-2 IPsec
  • We implemented it like hmac extension against md5 and/or sha1.
  • It works; tested with test vectors in the RFC by using tcrypt.
  • Will be submitted shortly