Symptoms

When software crypto module is used with AES-GCM algorithm, the 11.4.0 version fails to interop with 11.5.0 version. This is because the block size for AES-GCM in software crypto was not set correctly.

Impact

This issue is seen only with AES-GCM algorithm and with software crypto module. So there are options to either use a different algorithm or use hardware crypto module.

Conditions

AES-GCM algorithm must be configured. Software crypto module must be enabled or VE/VMs must be used.

Workaround

Either use a different algorithm or use hardware crypto module.

Fix Information

None

Behavior Change