| commit | e4bec827feda76d5e7417a2696a75424834d564f | [log] [tgz] |
|---|---|---|
| author | David S. Miller <davem@davemloft.net> | Fri Sep 22 15:17:35 2006 -0700 |
| committer | David S. Miller <davem@davemloft.net> | Fri Sep 22 15:17:35 2006 -0700 |
| tree | bd899e0c2fbf7f6dd1d33ce0610d88fc4a8864ee | |
| parent | 44e36b42a8378be1dcf7e6f8a1cb2710a8903387 [diff] |
[IPSEC] esp: Defer output IV initialization to first use. First of all, if the xfrm_state only gets used for input packets this entropy is a complete waste. Secondly, it is often the case that a configuration loads many rules (perhaps even dynamically) and they don't all necessarily ever get used. This get_random_bytes() call was showing up in the profiles for xfrm_state inserts which is how I noticed this. Signed-off-by: David S. Miller <davem@davemloft.net>