similar to: AES-GCM with AES-NI

Hi, We are having issues with our samba server running on CentOS 7. It's generating core dumps and dumping them in the / (root filesystem) directory in the form of core.##### where the # is a series of numbers. Snippets of log files and some troubleshooting commands are below. Hope someone can have a look and see if I should file this as a bug, as there were similar posts in the samba

On 04.02.2015 22:32, Dennis Jacobfeuerborn wrote: > Hi, > today I tried to configure a guest using Virt-Manager and used the "copy > host cpu configuration" option which resultet in a "Sandy Bridge" model. > What I noticed is that for example the "aes" extension is not available > in the guest even though it is available on the host cpu. > > This

https://bugzilla.mindrot.org/show_bug.cgi?id=3194 Bug ID: 3194 Summary: Please consider lowering chacha20-poly1305 at openssh.com cipher priority on AES-NI capable CPU Product: Portable OpenSSH Version: 8.3p1 Hardware: amd64 OS: Linux Status: NEW Severity: enhancement

Hi, Short version: If I had a CPU with the aes-ni [1] feature would luks use it? I know that Upstream Vendors Security Guide [2] says: ...snip The default cipher used for LUKS (refer to cryptsetup --help) is aes-cbc-essiv:sha256 (ESSIV - Encrypted Salt-Sector Initialization Vector). Note that the installation program, Anaconda, uses by default XTS mode (aes-xts-plain64) snap... I also found a

> hi all, > > my working samba-4.1.7 member of a samba3 domain (samba-3.5.3) failed > while updating to samba-4.2.0. Users were no longer able to access > shares because the trust account was broken. > > According to release notes (Winbindd/Netlogon improvements): > > For the client side we have the following new options: > "require strong key" (yes by

Hi, today I tried to configure a guest using Virt-Manager and used the "copy host cpu configuration" option which resultet in a "Sandy Bridge" model. What I noticed is that for example the "aes" extension is not available in the guest even though it is available on the host cpu. This is what the host cpu looks like: model name : Intel(R) Xeon(R) CPU E5-2650 v3 @

Hello everybody, Thank you Fufu Fang for your quick reply: With tinc version 1.0.35 and the bellow options at 100% CPu load i get about 10 MB/s... PMTU = 1400 PMTUDiscovery = yes #Cipher = none Cipher = chacha20-poly1305 Digest = blake2b512 Tried Cipher = none as well and also got 10MB/s with 100% CPU on one thread the other three available threads are idle. With inc_1.1~pre17-1.1_amd64.deb

Hello, Came across a crash on samba-server(4.4) RHEL-7.3. (gdb) bt #0 0x00007f8e1e4821d7 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007f8e1e4838c8 in __GI_abort () at abort.c:90 #2 0x00007f8e1fde2c4b in dump_core () at ../source3/lib/dumpcore.c:322 #3 0x00007f8e1fdd6007 in smb_panic_s3 (why=<optimized out>) at ../source3/lib/util.c:814 #4

Hello everybody, First a big thanks for tinc-vpn I am still using it next to wireguard and openvpn. I am having a setup where the tinc debian appliance is at 100% cpu load doing about 7.5MB/s. Compression = 9 PMTU = 1400 PMTUDiscovery = yes Cipher = aes-128-cbc How can I pick a cipher that is the fasted for my CPU and don't create a CPU bottleneck at 100%. Kind regards, Jelle de Jong

======================================================== "It's better to be a lion for a day than a sheep all your life." Elizabeth Kenny ======================================================== Release Announcements --------------------- This is the latest stable release of the Samba 4.10 release series. Changes since 4.10.12 ---------------------- o Jeremy

Hello, Are there any known efforts to implement RFC 5647 i.e. AES Galois Counter Mode for the Secure Shell Transport Layer Protocol for OpenSSH? If not, would OpenSSH project be interested in such feature? Thanks.

Hi list, For a client I am setting up a system which will use T1 PRI from Primus, who offer only NI-1 and NI-2 protocols for D-Channels. Previousely I have only used switchtypes euroISDN and National. Although the documentation says Asterisk does support NI-1 ans NI-2, but wanted to get your opinion if you have used these protocols on an Asterisk box and if there were any things to consider. If

https://bugzilla.mindrot.org/show_bug.cgi?id=2366 Bug ID: 2366 Summary: ssh-keygen doesn't correctly decode new format GCM-encrypted keys Product: Portable OpenSSH Version: 6.7p1 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component:

Respuesta: Debes participar en el Congreso Online por Zoom Vendedores Expertos 2024 este 18 de Diciembre. Inscr?bete o Solicita informaci?n sin compromiso Prep?rate para ser inspirado, educado y transformado por nuestro equipo de ?lite de consultores, oradores y especialistas en ventas industriales. Ellos te llevar?n en un viaje de aprendizaje intensivo, compartiendo sus experiencias y t?cticas

I would like to implement an arbitrary script to be executed when logging on via SSH. This is supposedly possible using the ForceCommand option to sshd. However, as soon as I implement any script, even as simple as echoing a string, clients can no longer connect to the server. Clients report only that the connection was dropped by the server. The server, in debug mode, shows: Feb 17 16:14:01

I have a North American BRI configured as National ISDN (NI-1) on an SBC (Nortel?) switch. SBC calls this "FastTrak ISDN", and it's surprisingly inexpensive -- less than two POTS lines. I've been trying to find an inexpensive PCI interface solution to connect this to Asterisk as voice lines. I prefer ISDN BRI over POTS lines because of the improved signalling, fast dialing,

Does anyone know the cause of these BAD BAD BAD messages? I think I lost all my calls when it happened too. We have nagios running against IAX and nagios reports that IAX is down. It would seem that the entire application locks up when this happens and calls are dropped. Connected to Asterisk 1.2.14 currently running on flexo (pid = 26846) Verbosity is at least 3 flexo*CLI> show channels

I'm looking at running an ext3 filesystem on top of a loopback AES encrypted device, which in turn is on top of a raw partition (so no other things in the way that should be reordering writes). Are there likely to be any strange issues with using ext3 in this way? Nigel. -- [ Nigel Metheringham Nigel.Metheringham@InTechnology.co.uk ] [ - Comments in this message are my own and

Hi all, I''m trying to create a IPsec tunnel from a Debian Etch machine to a Cisco PIX. Part of my config is the following: add x.x.x.x x.x.x.x esp 34501 -m tunnel -E aes-ctr "abcdefghijklmnop"; When I try to set this using setkey, it fails with the following message: line 9: unsupported algorithm at [abcdefghijklmnop] parse failed, line 9. Can anyone tell me what

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: 8f164ec4380058ccbc31e7c8ab05c85d0c3d85c5 Total changesets: 1 Log message: aes cbc pad added to kernel software provider Files: update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/common/crypto/aes/aes_cbc_crypt.h update: usr/src/uts/common/crypto/io/aes.c