Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-11-28 | finish conversion to workq. remove list remnants, and put spl in the right | Ted Unangst | |
places. handle the no workq case here. ok deraadt | |||
2007-11-26 | typos; ok jmc@ | Martynas Venckus | |
sys/netinet/in_pcb.c and sys/net/bridgestp.c ok henning@ sys/dev/pci/bktr/* ok jakemsr@ | |||
2007-11-25 | convert crypto thread to workq. add WQ_DIRECTOK flag to workq. | Ted Unangst | |
combined, this lets us use crypto before the thread is running and therefore cryptoraid can attach nice and early. ok/testing deraadt mbalmer marco | |||
2007-11-14 | do not call crypto_done() on errors, since the drivers already do this. | Markus Friedl | |
otherwise we call the callback twice; fixes panics on crypto errors as seen on reboot; ok hshoexer | |||
2007-09-15 | fix error introduced by my previous commit: | Hans-Joerg Hoexer | |
"MALLOC(*swd, ...)" vs. "swd = malloc(..." ok millert | |||
2007-09-13 | Here too: Convert MALLOC/FREE to malloc/free and use M_ZERO where applicable. | Hans-Joerg Hoexer | |
error spotting and ok krw@ | |||
2007-09-11 | Add __bounded__ attributes to prototypes. | Damien Miller | |
Use (x & 0xff) rather than (x % 256) - compilers generate faster code. Add arc4_getbytes function to extract raw keystream ok markus@ tom@ | |||
2007-09-10 | Make the hmac ipad/opad globals "const" and fixup the crypto functions | Henric Jungheim | |
to match. ok deraadt@ | |||
2007-07-24 | add rc4_skip() function that can be used to discard bytes from | Damien Bergamini | |
the arc4 key stream. rc4_skip(ctx, len); is equivalent to: u_int8_t dummy[len]; rc4_crypt(ctx, dummy, dummy, len); except that is does not require storage space and that it saves some cpu cycles. ok deraadt@ | |||
2007-07-20 | unbreak landisk kernel sha1 by working around a compiler bug; | Otto Moerbeek | |
also brings kernel sha1 more in line with userland; discussed with miod@ and millert@; | |||
2007-05-27 | make the #defines in rijndael.h a bit more meaningful | Ted Unangst | |
ok djm and with a hint from henning | |||
2007-05-27 | make crp_buf a void *. caddr_t implies bufferness, it's not. | Ted Unangst | |
ok deraadt jason | |||
2007-04-10 | ``it's'' -> ``its'' when the grammar gods require this change. | Miod Vallat | |
2007-02-21 | Don't use arbitrary 128 bytes as size of the blf key array if we know exactly | Alexander von Gernler | |
how much blowfish takes at max, which is 72 bytes. Also define a constant for this in the include file, suggested by ray@. ok pedro@ thib@ tedu@ | |||
2007-02-19 | minimum blocksize for ESP is 32 bit, so adjust blocksize of NULL | Hans-Joerg Hoexer | |
encryption accordingly. Makes NULL encryption useable with ESP. Noticed by Martin Hedenfalk <martin.hedenfalk at gmail.com>. ok markus@ | |||
2006-12-29 | Avoid void * arithmetic, okay deraadt@, suggestions from millert@ | Pedro Martelletto | |
2006-11-19 | typo; from bret lambert | Jason McIntyre | |
ok pedro | |||
2006-10-25 | pr5274 fix localhost dos with oversized values | Ted Unangst | |
ok deraadt | |||
2006-05-31 | remove some silly casts. put spl calls after all declarations. | Ted Unangst | |
put one splx in a better spot. make a variable size MALLOC use malloc. remove null test after malloc(M_WAITOK). add PR_NOWAIT flag to pool_get instead of 0. change callbacks to correct type. ok brad deraadt markus mickey | |||
2006-03-23 | kill evil \r; from cedric | Michael Shalayeff | |
2006-03-21 | Implementation of the Michael MIC as defined in IEEE 802.11i for TKIP. | Reyk Floeter | |
The MIC generates a weak 64bit digest protected by an additional key. Obviously, this digest alg is required for future IEEE 802.11i/WPA support. test vectors passed on alpha amd64 mvme68k mvme88k sgi sparc sparc64 vax i386 ok djm@ | |||
2006-03-04 | splimp -> splvm | Brad Smith | |
ok miod@ | |||
2005-08-18 | do not allow 0-length transforms; from freebsd | Theo de Raadt | |
2005-06-13 | get rid of ifdef MSDOS, no binary change | Hans-Joerg Hoexer | |
ok markus@ | |||
2005-05-25 | AESCTR support for ESP (RFC 3686); ok hshoexer | Markus Friedl | |
2005-05-10 | support NULL encryption for ESP; ok hshoexer, ho | Markus Friedl | |
2005-05-02 | simplify by using arc4random_bytes(), ok djm, hshoexer | Markus Friedl | |
2005-03-24 | major knf | Hans-Joerg Hoexer | |
fix spelling in comment, by rohee@ no binary change ok deraadt@ | |||
2005-03-24 | ansi and tiny knf | Hans-Joerg Hoexer | |
ok deraadt@ | |||
2004-12-21 | Don't use crypto thread for callbacks. | Marco Pfatschbacher | |
This primarily improves IPsec performance when using crypto accelerators. With help from markus@, tested by wvdputte@. ok deraadt@, markus@ | |||
2004-12-20 | Allow the setkey function of a transform to fail, eg. when an insufficient | Hans-Joerg Hoexer | |
number of key bits is supplied. Only AES and DES/3DES might fail. ok and help markus@ | |||
2004-12-15 | minimum key length of aes is 128 bit, not 64. | Hans-Joerg Hoexer | |
ok markus | |||
2004-12-14 | indentation and some knf, no binary change | Hans-Joerg Hoexer | |
ok + help markus | |||
2004-06-26 | Ansification of defalte-/lsz-stubs. | Hans-Joerg Hoexer | |
ok jfb@ | |||
2004-06-20 | In crypto_thread(), always save return value from splimp(). We were only | Aaron Campbell | |
storing it once on kernel startup. Scary. "holy crap" --deraadt. art@ ok Unclear if this was actually a problem in practice, but this doesn't hurt. | |||
2004-05-07 | Replace RSA-derived md5 code with code derived from Colin Plumb's PD version. | Todd C. Miller | |
This moves md5.c out of libkern and into sys/crypto where it belongs (as requested by markus@). Note that md5.c is still mandatory (dev/rnd.c uses it). Verified with IPsec + hmac-md5 and tcp md5sig. OK henning@ and hshoexer@ | |||
2004-05-03 | Rev 1.4 was bogus (committed from the wrong tree), this repairs it. | Todd C. Miller | |
2004-05-03 | some minor KNF | Todd C. Miller | |
2004-04-29 | The data pointer passed to the transform function may not be properly | Todd C. Miller | |
aligned so copy it in a way that a) is endian indepenent and b) does not rely on alignment. Problem found and solution tested by hshoexer@ | |||
2004-04-28 | Sync userland sha2.c with kernel. The SHAXXX_End and SHAXXX_Data functions | Todd C. Miller | |
have been removed; we provide these in userland but not in the kernel. | |||
2004-04-28 | Some KNF, made bit count u_int64_t instead of u_int32_t (similar to libc). | Hans-Joerg Hoexer | |
Added constants for buffer lengths. ok millert@ | |||
2004-04-14 | leak; vgirish at tenet.res.in; via angelos; ok hshoexer, henning, deraadt | Markus Friedl | |
2004-03-31 | remove sparc64/gcc2 workaround. | Brad Smith | |
ok millert@ deraadt@ jason@ | |||
2004-03-14 | disable mac for now, they are not usable with current hardware; ok deraadt@ | Markus Friedl | |
2004-02-08 | save kernel space; full unroll is not needed; from freebsd | Theo de Raadt | |
2004-02-05 | expose two more functions | Theo de Raadt | |
2003-12-26 | - use 1/2 space for rijndael context in ipsec | Markus Friedl | |
- rijndael_set_key_enc_only() sets up context for encryption only - rijndael_set_key() always sets up full context - rijndaelKeySetupDec() gets back original protoype - uvm: use _enc_only() interface with hshoexer@, ok deraadt@ | |||
2003-12-14 | alignment fixes (e.g sparc 64); from Daniel Lucq; ok millert, henning | Markus Friedl | |
2003-10-07 | arc4 support; ok millert@, fgsch@ | Markus Friedl | |
2003-09-23 | Replace select backends with poll backends. selscan() and pollscan() | Todd C. Miller | |
now call the poll backend. With this change we implement greater poll(2) functionality instead of emulating it via the select backend. Adapted from NetBSD and including some changes from FreeBSD. Tested by many, deraadt@ OK |