While 3c12905103 ("ipsec: Add function to compare two ipsec_sa_cfg_t instances") added a comparison function to avoid issues with non-zeroed padding, hashes were still calculated using chunk_hash().
3c12905103