I applied patch for support RFC 4309 using AES CCM Mode with IPSec ESP in iproute. The patch isn't working with RHEL-5 kernel. I tested it with kernel-2.6.18-53.1.4.el5. I suppose there will be needed some kernel changes. I have working AES CCM Mode with kernel-2.6.25-0.218.rc8.git7.fc9.i686 and iproute-2.6.25-1.fc10.i386 (upstream iproute with Herberts patch http://marc.info/?l=linux-crypto-vger&m=120365914102073&w=2).
*** This bug has been marked as a duplicate of 443423 ***