iv_gen: Mask sequential IVs with a random salt
authorTobias Brunner <tobias@strongswan.org>
Mon, 5 Aug 2013 14:24:40 +0000 (16:24 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 11 Oct 2013 13:55:40 +0000 (15:55 +0200)
commit0c6f6c4e34086adfc2db5dfdf467cf7bda83f317
treedb113325b2947e17b713cb86f619cb46c95da70a
parente8229ad558efcb7b07c6ef0f77269120d49500f9
iv_gen: Mask sequential IVs with a random salt

This makes it harder to attack a HA setup, even if the sequence numbers were
not fully in sync.
src/libstrongswan/crypto/iv/iv_gen_seq.c