Subject: Re: FYI: this time, really about to import crypto framework
To: Sam Leffler <>
From: None <>
List: tech-kern
Date: 07/23/2003 11:00:13
>>> This is assuming there's still a consensus to move towards a
>>> continuation-passing crypto framework for IPsec in general (which is a
>>> pre-requisite for taking advantage of crypto accelerator cards) and to
>>> Fast-IPsec (finishing adding Ipv6) in particular.
>> I think that's a good direction to move.

	Sam's code re-injects ESP-decoded packet (and others) to ipintrq,
	just like openbsd (Sam commented that he wouldn't do it but from
	freebsd code, he did).  it causes a big problem on transport mode case.