From e8229ad558efcb7b07c6ef0f77269120d49500f9 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 5 Aug 2013 15:41:45 +0200 Subject: iv_gen: Provide external sequence number (IKE, ESP) This prevents duplicate sequential IVs in case of a HA failover. --- src/libcharon/encoding/payloads/encryption_payload.h | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/libcharon/encoding/payloads/encryption_payload.h') diff --git a/src/libcharon/encoding/payloads/encryption_payload.h b/src/libcharon/encoding/payloads/encryption_payload.h index 5c6069339..f4fc7d667 100644 --- a/src/libcharon/encoding/payloads/encryption_payload.h +++ b/src/libcharon/encoding/payloads/encryption_payload.h @@ -71,13 +71,15 @@ struct encryption_payload_t { /** * Generate, encrypt and sign contained payloads. * + * @param mid message ID * @param assoc associated data * @return * - SUCCESS if encryption successful * - FAILED if encryption failed * - INVALID_STATE if aead not supplied, but needed */ - status_t (*encrypt) (encryption_payload_t *this, chunk_t assoc); + status_t (*encrypt) (encryption_payload_t *this, u_int64_t mid, + chunk_t assoc); /** * Decrypt, verify and parse contained payloads. -- cgit v1.2.3