Bug ID 469248: 11.4.0-hf6 is not working with 11.5.0-hf3 when using AES-GCM with software crypto.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
11.4.0

Opened: Jun 26, 2014

Severity: 3-Major

Symptoms

When software crypto module is used with AES-GCM algorithm, the 11.4.0 version fails to interop with 11.5.0 version. This is because the block size for AES-GCM in software crypto was not set correctly.

Impact

This issue is seen only with AES-GCM algorithm and with software crypto module. So there are options to either use a different algorithm or use hardware crypto module.

Conditions

AES-GCM algorithm must be configured. Software crypto module must be enabled or VE/VMs must be used.

Workaround

Either use a different algorithm or use hardware crypto module.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips