Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-06-10 | fix ivory tower greek fix. ok angelos@ | Bob Beck | |
2002-06-10 | You should always free the keys, not just on error --- the crypto | Angelos D. Keromytis | |
framework doesn't hold on to these. | |||
2002-06-10 | __FUNCTION__ -> __func__ | Marc Espie | |
2002-06-09 | Don't use an int for the flags, when the structure uses | Angelos D. Keromytis | |
u_int8_t. Also, make sure the logic is correct (bad theo!) | |||
2002-06-07 | Handle csecreate errors. deraadt@ and beck@ | Thomas Nordin | |
2002-05-18 | not ready to export fcrypt to userland yet; spotted by lebel | Theo de Raadt | |
2002-05-18 | export struct fcrypt to userland | Theo de Raadt | |
2002-05-08 | Don't deref null pointer in failure case. | Jason Wright | |
2002-04-27 | 32 bit constraint is wrong, we think | Theo de Raadt | |
2002-04-26 | minor tweaks | Theo de Raadt | |
2002-04-26 | disable cryptodevallowsoft again; constrain key bit sizes to % 32cryptodev.c | Theo de Raadt | |
2002-04-24 | kernel API does not need the userland addresses, make them go away | Theo de Raadt | |
2002-04-23 | initial hack at a CIOCSYMFEAT ioctl | Theo de Raadt | |
2002-04-23 | driver queueing & callback code for keying operations | Theo de Raadt | |
2002-04-22 | KNF | Theo de Raadt | |
2002-04-08 | Credit DARPA/USAF appropriately. | Jason Wright | |
2002-04-03 | fix possible alignment problem; with markus@, angelos@ deraadt@ ok. | Federico G. Schwindt | |
2002-04-03 | disable userland crypto for 3.1 | Theo de Raadt | |
2002-03-19 | Don't keep the last blocksize-bytes of ciphertext for use as the next | Angelos D. Keromytis | |
plaintext's IV, in CBC mode. Use arc4random() to acquire fresh IVs per message instead (particularly useful for IPsec). This avoids the CBC oracle attack. provos@ ok | |||
2002-03-15 | Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do things | Todd C. Miller | |
the ANSI way. | |||
2002-03-14 | First round of __P removal in sys | Todd C. Miller | |
2002-03-05 | export MD5/SHA1 via /dev/crypto; ok provos@, beck@ | Markus Friedl | |
tested with cryptosoft and kern.cryptodevallowsoft=1 | |||
2002-03-04 | parts that copy in PK parameters | Theo de Raadt | |
2002-03-04 | remove old PK stuff | Theo de Raadt | |
2002-03-04 | crypto_check_alg() is not needed | Theo de Raadt | |
2002-03-02 | do some more renaming | Theo de Raadt | |
2002-03-02 | initial cut at crypto_sop definitions for symmetric crypto | Theo de Raadt | |
2002-03-01 | sysctl for cryptodevallowsoft - /dev/crypto will allow the software engine | Niels Provos | |
to be used if there are no hardware cards. mostly for debugging and regression. | |||
2002-03-01 | remove CRYPTO_BUF_CONTIG and convert to handle iovs. okay deraadt@ | Niels Provos | |
2002-03-01 | helper functions for uio (cuio_apply and cuio_getptr) okay deraadt@ | Niels Provos | |
2002-02-24 | license repair, angelos ok | Theo de Raadt | |
2002-02-23 | sysctl kern.usercrypto | Theo de Raadt | |
2002-02-08 | - Rename FILE_{,UN}USE to FREF and FRELE. USE is a bad verb and we don't have | Artur Grabowski | |
the same semantics as NetBSD anyway, so it's good to avoid name collissions. - Always fdremove before freeing the file, not the other way around. - falloc FREFs the file. - have FILE_SET_MATURE FRELE the file (It feels like a good ortogonality to falloc FREFing the file). - Use closef as much as possible instead of ffree in error paths of falloc:ing functions. closef is much more careful with the fd and can deal with the fd being forcibly closed by dup2. Also try to avoid manually calling *fo_close when closef can do that for us (this makes some error paths mroe complicated (sys_socketpair and sys_pipe), but others become simpler (sys_open)). | |||
2002-01-29 | Remove the iov2pages/mbuf2pages API... All of the relevant arch's support | Jason Wright | |
bus_dma(9) which actually does this job correctly. | |||
2002-01-23 | It looks like there has been one crack smoking and a few cut and pastes. | Artur Grabowski | |
PR_FREEHEADER should not be set in pool_init by the caller. It shouldn't be set in pool_init at all. Besides, it's going away soon anyway. | |||
2002-01-23 | Pool deals fairly well with physical memory shortage, but it doesn't deal | Artur Grabowski | |
well (not at all) with shortages of the vm_map where the pages are mapped (usually kmem_map). Try to deal with it: - group all information the backend allocator for a pool in a separate struct. The pool will only have a pointer to that struct. - change the pool_init API to reflect that. - link all pools allocating from the same allocator on a linked list. - Since an allocator is responsible to wait for physical memory it will only fail (waitok) when it runs out of its backing vm_map, carefully drain pools using the same allocator so that va space is freed. (see comments in code for caveats and details). - change pool_reclaim to return if it actually succeeded to free some memory, use that information to make draining easier and more efficient. - get rid of PR_URGENT, noone uses it. | |||
2001-12-19 | sync KNF with src/usr.bin/ssh | Markus Friedl | |
2001-11-13 | and for the case where it allocates a bunch at a time, also make sure the | Theo de Raadt | |
software flag gets set. | |||
2001-11-13 | incorrect check | Theo de Raadt | |
2001-11-13 | garbage in my last commit | Theo de Raadt | |
2001-11-09 | be way more sure that software cannot be used | Theo de Raadt | |
2001-11-08 | indent | Theo de Raadt | |
2001-11-06 | Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary. | Miod Vallat | |
(Look ma, I might have broken the tree) | |||
2001-10-26 | - every new fd created by falloc() is marked as larval and should not be used | Artur Grabowski | |
any anyone. Every caller of falloc matures the fd when it's usable. - Since every lookup in the fd table must now check this flag and all of them do the same thing, move all the necessary checks into a function - fd_getfile. | |||
2001-09-26 | RIPEMD-160 implementation based on | Markus Friedl | |
ftp://ftp.rsasecurity.com/pub/cryptobytes/crypto3n2.pdf, ok deraadt@ | |||
2001-09-13 | missing $OpenBSD: | Markus Friedl | |
2001-09-03 | do not screw up the reference counts | Theo de Raadt | |
2001-08-28 | Getting closer to working userland MAC. | ben | |
2001-08-24 | KNF | Theo de Raadt | |
2001-08-24 | switch to the optimised AES reference code from | Markus Friedl | |
http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip the same code is used by ssh, so please make sure to update usr.sbin/ssh/rijndael.c if you change this code. tested on sparc (jason) and with swap encryption (me); ok deraadt@, provos@ |