Re: kern/41075: options IPSEC+IPSEC_ESP broken

[Geoff Wing <gcw%pobox.com@localhost>]

The following reply was made to PR kern/41075; it has been noted by GNATS.

From: Geoff Wing <gcw%pobox.com@localhost>
To: NetBSD GNATS <gnats-bugs%netbsd.org@localhost>
Cc: 
Subject: Re: kern/41075: options IPSEC+IPSEC_ESP broken
Date: Thu, 26 Mar 2009 10:51:52 +1100

 Hmm, seems to be a separate issue to kern/40969.
 
 :I switched to 'options FAST_IPSEC'.  Then everything worked as expected.
 :Maybe 'options IPSEC' and 'options IPSEC_ESP' should be retired, and
 :FAST_IPSEC exclusively recommended?
 
 FAST_IPSEC can't do all the same encryption algorithms that IPSEC/IPSEC_ESP
 can so it's not a drop-in replacement, e.g. AES-CTR 288 bit.
 
 Regards,
 Geoff