[Pkg-swan-devel] ChaCha20 and Poly1305

[Rui Santos]

Hi all,

I'm trying to test RFC7539 (https://tools.ietf.org/html/rfc7539) to my
IPSec VPN Tunnels, using StrongSwan.
In order to that, I've downloaded and installed:
- Kernel 4.6 from jessie-backports
- openssl 1.1.0 from experimental
- StrongSwan 5.5.0 from stretch

However, I'm unable to test it. Following this error message
configured DH group NTRU_256 not supported
I've started to find out why wasn't it working.

I've finally stumbled upon strongswan 5.5.0 source package, and found
out that the plugins for it to work are not complied. The necessary
plugins are:
- chapoly: --enable-chapoly
- ntru: --enable-ntru
Is it possible for any maintainer to include these plugins?

I've also tried to compile it from the source package but, the
downloaded source package will not compile as well:

    Running suite 'vectors':
    Running case 'failures': -
      Failure in 'test_vectors': failed > 0: 13 test vectors failed
(suites/test_vectors.c:30, i = 0)
  Passed 0/1 'vectors' test cases
.....
Passed 28 of 29 'libstrongswan' suites
FAIL: tests
==================
1 of 1 test failed
==================

Can anyone help me on this matter?

Thanks for you help,
-- 
Rui Santos
Veni, Vidi, Linux