=== freeswan-ext-v0.6-1.94-ext_3desfake.diff ===
--- freeswan-1.94/klips/net/ipsec/ext/Makefile.ext_3desfake	Wed Dec 31 21:00:00 1969
+++ freeswan-1.94.jjo/klips/net/ipsec/ext/Makefile.ext_3desfake	Sun Dec 16 09:43:18 2001
@@ -0,0 +1,6 @@
+EXT_MODULES += ipsec_3desfake.o
+
+IPSEC_EXT_3DESFAKE_OBJS=ipsec_ext_3desfake.o ../libdes/libdes.a
+ipsec_3desfake.o: $(IPSEC_EXT_3DESFAKE_OBJS)
+	$(LD) -r $(IPSEC_EXT_3DESFAKE_OBJS) -o $@
+
--- freeswan-1.94/klips/net/ipsec/ext/ipsec_ext_3desfake.c	Wed Dec 31 21:00:00 1969
+++ freeswan-1.94.jjo/klips/net/ipsec/ext/ipsec_ext_3desfake.c	Mon Dec 17 20:10:02 2001
@@ -0,0 +1,137 @@
+/*
+ * ipsec_ext 3DES cipher fake stubs: install 3DES ESP under other ESP id
+ * 	just for testing
+ *
+ * Author: JuanJo Ciarlante <jjo-ipsec@mendoza.gov.ar>
+ * 
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the
+ * Free Software Foundation; either version 2 of the License, or (at your
+ * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
+ * 
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+ * for more details.
+ *
+ */
+#include <linux/config.h>
+#include <linux/version.h>
+
+#include <linux/module.h>
+#include <linux/init.h>
+
+#include <linux/kernel.h> /* printk() */
+#include <kversions.h>
+#include <linux/errno.h>  /* error codes */
+#include <linux/types.h>  /* size_t */
+#include <linux/string.h>
+
+/* Check if __exit is defined, if not null it */
+#ifndef __exit
+#define __exit
+#endif
+
+/*	Low freeswan header coupling	*/
+#include "ipsec_ext.h"
+#include "../libdes/des.h"
+
+static int debug=0;
+MODULE_PARM(debug, "i");
+static int test=0;
+MODULE_PARM(test, "i");
+static int esp_id=0;
+MODULE_PARM(esp_id, "i");
+
+#define ESP_3DES		254	/* FAKE */
+
+#define ESP_3DES_CBC_BLKLEN	8	/* 64 bit blocks */
+#define ESP_DES_KEY_SZ		8
+#define ESP_3DES_KEY_SZ		8*3 	/* 3DES */
+
+/* Ugly: struct esp in ipsec_esp.h has fixed esp_iv[8] */
+struct esp_3des
+{
+	__u32   esp_spi;			/* Security Parameters Index */
+	__u32   esp_rpl;			/* Replay counter */
+	__u8    esp_iv[ESP_3DES_CBC_BLKLEN];	/* iv */
+};
+
+struct des3_eks{
+	des_key_schedule ctx[3];
+};
+static int _3des_set_key(caddr_t key_e, caddr_t key, int keysize) {
+	des_key_schedule *ctx=((struct des3_eks*)key_e)->ctx;
+	int i, error;
+	if (debug > 0)
+		printk(KERN_DEBUG "klips_debug:_3des_set_key:"
+				"key_e=%p key=%p keysize=%d\n",
+				key_e, key, keysize);
+	for(i = 0; i < 3; i++) {
+		des_set_odd_parity((des_cblock *)(key+ESP_DES_KEY_SZ * i));
+		error = des_set_key((des_cblock *)(key+ESP_DES_KEY_SZ * i),
+				    ctx[i]);
+		if (debug > 0)
+			printk(KERN_DEBUG "klips_debug:des_set_key:"
+				"ctx[%d]=%p, error=%d \n",
+				i, ctx[i], error);
+	}
+	return 0;
+}
+void des_ede3_cbc_encrypt(des_cblock *input, des_cblock *output,
+		long length, des_key_schedule ks1, des_key_schedule ks2,
+		des_key_schedule ks3, des_cblock *ivec, int enc);
+
+static int _3des_cbc_encrypt(caddr_t key_e, caddr_t in, caddr_t out, int ilen, caddr_t iv, int encrypt) {
+	des_key_schedule *ctx=((struct des3_eks*)key_e)->ctx;
+	if (debug > 1)
+		printk(KERN_DEBUG "klips_debug:_3des_cbc_encrypt:"
+				"key_e=%p in=%p out=%p ilen=%d iv=%p encrypt=%d\n",
+				ctx, in, out, ilen, iv, encrypt);
+	des_ede3_cbc_encrypt((des_cblock*) in, (des_cblock*) out, ilen, ctx[0], ctx[1], ctx[2], (des_cblock *)iv, encrypt);
+	return ilen;
+}
+static struct ipsec_ext ipsec_ext_3DES = {
+	name: 		"3des",
+	enc_alg: 	ESP_3DES,
+	blocksize:	ESP_3DES_CBC_BLKLEN,
+	esphlen:	sizeof(struct esp_3des),
+	keyminbits:	ESP_3DES_KEY_SZ*7, /*  7bits key+1bit parity  */
+	keymaxbits:	ESP_3DES_KEY_SZ*7, /*  7bits key+1bit parity  */
+	keysize:	ESP_3DES_KEY_SZ,
+	key_e_size:	sizeof(struct des3_eks),
+	refcnt:		ATOMIC_INIT(0),
+	new_key:	NULL,
+#undef set_key
+	set_key:	_3des_set_key,
+#undef cbc_encrypt
+	cbc_encrypt:	_3des_cbc_encrypt,
+	support_p:	NULL,
+};
+	
+static int __init ipsec_3des_init(void)
+{
+	int ret, test_ret;
+	if (esp_id)
+		ipsec_ext_3DES.enc_alg=esp_id;
+	ret=register_ipsec_ext(&ipsec_ext_3DES);
+	printk(__FUNCTION__ "(enc_alg=%d name=%s): ret=%d\n", 
+			ipsec_ext_3DES.enc_alg, ipsec_ext_3DES.name, ret);
+	if (test) {
+		test_ret=ipsec_ext_test(ipsec_ext_3DES.enc_alg, test);
+		printk(__FUNCTION__ "(enc_alg=%d): test_ret=%d\n", 
+				ipsec_ext_3DES.enc_alg, test_ret);
+	}
+	return ret;
+}
+static void __exit ipsec_3des_fini(void)
+{
+	unregister_ipsec_ext(&ipsec_ext_3DES);
+	return;
+}
+#ifdef MODULE_LICENSE
+MODULE_LICENSE("GPL");
+#endif
+
+module_init(ipsec_3des_init);
+module_exit(ipsec_3des_fini);