[IPSEC] esp: Defer output IV initialization to first use.
authorDavid S. Miller <davem@davemloft.net>
Fri, 22 Sep 2006 22:17:35 +0000 (15:17 -0700)
committerDavid S. Miller <davem@davemloft.net>
Fri, 22 Sep 2006 22:17:35 +0000 (15:17 -0700)
commite4bec827feda76d5e7417a2696a75424834d564f
treebd899e0c2fbf7f6dd1d33ce0610d88fc4a8864ee
parent44e36b42a8378be1dcf7e6f8a1cb2710a8903387
[IPSEC] esp: Defer output IV initialization to first use.

First of all, if the xfrm_state only gets used for input
packets this entropy is a complete waste.

Secondly, it is often the case that a configuration loads
many rules (perhaps even dynamically) and they don't all
necessarily ever get used.

This get_random_bytes() call was showing up in the profiles
for xfrm_state inserts which is how I noticed this.

Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/esp.h
net/ipv4/esp4.c
net/ipv6/esp6.c