summaryrefslogtreecommitdiff
path: root/sys/crypto/cryptosoft.c
AgeCommit message (Collapse)Author
2003-07-24hmac-sha2-{256,384,512} support in AH/ESP auth. markus okJun-ichiro itojun Hagino
2003-02-21There's no cleaning necessary for deflate compression, so remove it fromJason Wright
the switch.
2002-11-21From Angelos:Jason Wright
- simplistic load balancing across multiple cards - simplified registration process - a few style nits.
2002-11-12Add a CRYPTO_NULL xform (it's a do nothing, but nice for measuring theJason Wright
bandwidth of the kernel API). It's only available from userland and then only if kern.cryptodevallowsoft=1.
2002-04-26minor tweaksTheo de Raadt
2002-04-22KNFTheo de Raadt
2002-04-03fix possible alignment problem; with markus@, angelos@ deraadt@ ok.Federico G. Schwindt
2002-03-19Don't keep the last blocksize-bytes of ciphertext for use as the nextAngelos D. Keromytis
plaintext's IV, in CBC mode. Use arc4random() to acquire fresh IVs per message instead (particularly useful for IPsec). This avoids the CBC oracle attack. provos@ ok
2002-03-05export MD5/SHA1 via /dev/crypto; ok provos@, beck@Markus Friedl
tested with cryptosoft and kern.cryptodevallowsoft=1
2002-03-01remove CRYPTO_BUF_CONTIG and convert to handle iovs. okay deraadt@Niels Provos
2001-11-09be way more sure that software cannot be usedTheo de Raadt
2001-08-08remove IPCOMP. derradt@ ok.Jean-Jacques Bernard-Gundol
2001-07-05#ifdef IPCOMP stuff properlyTheo de Raadt
2001-07-05Support for compression. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-25Update copyright; you can use this with or without fee (unless yourAngelos D. Keromytis
name is Theo Deraadt)
2001-06-23New prototype for crypto_register(), to take into account maximum keyAngelos D. Keromytis
length (for PK operations) and various flags. Structures for public key operations (DH, RSA, DSA). A lot of this work was done by jgarfiel@seas.upenn.edu
2001-06-23merge crypto/crypto{dev,}.h to crypto/cryptodev.h, to avoid name conflicts ↵Theo de Raadt
inside OpenSSL codebase
2001-06-16KNFTheo de Raadt
2001-06-06Don't bother migrating software sessions, as this might lead toAngelos D. Keromytis
session leakage.
2001-05-15fix $OpenBSD$ headerTheo de Raadt
2001-05-13initial cut at /dev/crypto support. takes original mbuf "try, and discardTheo de Raadt
if we fail" semantics and extends to two varients of data movement: mbuf, or an iovec style block.
2001-05-05Use the M_CRYPTO_DATA and M_CRYPTO_OPS malloc types.Angelos D. Keromytis
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
2000-11-09indentation nits.Artur Grabowski
2000-10-15Forgot to commit this, necessary for AES support.Angelos D. Keromytis
2000-08-19MALLOC/FREE -> malloc/free ok art@ angelos@Nathan Binkert
2000-07-21Fix KPDK mode (based on patch provided by lob@netstream.se)Angelos D. Keromytis
2000-06-20Use crypto_done()Angelos D. Keromytis
2000-06-18Register software Rijndael.Angelos D. Keromytis
2000-06-18Add Rijndael (128-bit blocksize) in the software crypto driver.Angelos D. Keromytis
Hacking at OpenBSD Crypto 2000 :-)
2000-06-06OpenBSD tagsTheo de Raadt
2000-06-06fix cleanup of crypto sessionsTheo de Raadt
2000-04-23Correct bitmask.Angelos D. Keromytis
2000-04-23Change the type of freesession to take u_int64_t as argument.Angelos D. Keromytis
2000-04-18Add a few newlines for readability.Angelos D. Keromytis
2000-03-29Better support for weird IV schemes (like ESP half-IV, or the swapAngelos D. Keromytis
encryption block-number IV).
2000-03-25Add CRD_F_IV_PRESENT, to indicate encryption requests where anAngelos D. Keromytis
explicit IV preceeds the data to be encrypted. Nice weather in Australia...
2000-03-20move software crypto engine out of main crypto.cTheo de Raadt
2000-03-19split crypto driver front-end from software crypto engineTheo de Raadt