Lines Matching refs:replay
2430 * Check the variable replay window.
2431 * ipsec_chkreplay() performs replay check before ICV verification.
2432 * ipsec_updatereplay() updates replay bitmap. This must be called after
2433 * ICV verification (it also performs replay check, which is usually done
2444 const struct secreplay *replay;
2456 replay = sav->replay;
2458 if (replay->wsize == 0) {
2460 return 1; /* no need to check replay. */
2464 frlast = replay->wsize - 1;
2465 wsizeb = replay->wsize << 3;
2474 if (replay->count == 0) {
2479 if (seq > replay->lastseq) {
2485 diff = replay->lastseq - seq;
2496 if ((replay->bitmap)[fr] & (1 << (diff % 8))) {
2508 * check replay counter whether to update or not.
2517 struct secreplay *replay;
2528 replay = sav->replay;
2530 if (replay->wsize == 0)
2531 goto ok; /* no need to check replay. */
2534 frlast = replay->wsize - 1;
2535 wsizeb = replay->wsize << 3;
2542 if (replay->count == 0) {
2543 replay->lastseq = seq;
2544 bzero(replay->bitmap, replay->wsize);
2545 (replay->bitmap)[frlast] = 1;
2549 if (seq > replay->lastseq) {
2551 diff = seq - replay->lastseq;
2557 vshiftl((unsigned char *) replay->bitmap, diff, replay->wsize);
2558 (replay->bitmap)[frlast] |= 1;
2561 bzero(replay->bitmap, replay->wsize);
2562 (replay->bitmap)[frlast] = 1;
2564 replay->lastseq = seq;
2569 diff = replay->lastseq - seq;
2580 if ((replay->bitmap)[fr] & (1 << (diff % 8))) {
2586 (replay->bitmap)[fr] |= (1 << (diff % 8));
2592 if (replay->count == ~0) {
2595 replay->overflow++;
2603 ipseclog((LOG_WARNING, "replay counter made %d cycle. %s\n",
2604 replay->overflow, ipsec_logsastr(sav)));
2607 replay->count++;