Subject: Re: FYI: this time, really about to import crypto framework
To: Sam Leffler <email@example.com>
From: None <firstname.lastname@example.org>
Date: 07/23/2003 11:00:13
>>> This is assuming there's still a consensus to move towards a
>>> continuation-passing crypto framework for IPsec in general (which is a
>>> pre-requisite for taking advantage of crypto accelerator cards) and to
>>> Fast-IPsec (finishing adding Ipv6) in particular.
>> I think that's a good direction to move.
Sam's code re-injects ESP-decoded packet (and others) to ipintrq,
just like openbsd (Sam commented that he wouldn't do it but from
freebsd code, he did). it causes a big problem on transport mode case.