(In reply to Jason Mader from comment #16) > Doesn't work for me. Incompatible with hmac-sha2-384 on FreeBSD 11.1. If you believe FreeBSD implementation is correct and Linux implementation is wrong, please provide a capture showing an outgoing IPv6/AH packet incorrect in the sense of RFC 4302 and its errata or a correct incoming packet that is not processed correctly by linux kernel. As far as I can say, the padding in IPv6/AH headers is done exactly the way RFC 4302 describes.