  <varlistentry>
  <term><emphasis remap='B'>sha2_truncbug</emphasis></term>
  <listitem>
<para>The default hash truncation for sha2_256 is 128 bits. Linux
implemented the draft version which stated 96 bits. This option enables
using the bad 96 bits version to interop with older linux kernels
(unpatched version 2.6.33 and older) and libreswan versions before 2.6.38.
Currently the accepted values are <emphasis remap='B'>no</emphasis>,
(the default) signifying default IETF truncation of 128 bits, or <emphasis
remap='B'>yes</emphasis>, signifying 96 bits broken Linux kernel style
truncation.  </para>
  </listitem>
  </varlistentry>

