summaryrefslogtreecommitdiff
path: root/sys/crypto
AgeCommit message (Collapse)Author
2002-04-03disable userland crypto for 3.1Theo de Raadt
2002-03-19Don't keep the last blocksize-bytes of ciphertext for use as the nextAngelos D. Keromytis
plaintext's IV, in CBC mode. Use arc4random() to acquire fresh IVs per message instead (particularly useful for IPsec). This avoids the CBC oracle attack. provos@ ok
2002-03-15Kill #if __STDC__ used to do K&R vs. ANSI varargs/stdarg; just do thingsTodd C. Miller
the ANSI way.
2002-03-14First round of __P removal in sysTodd C. Miller
2002-03-05export MD5/SHA1 via /dev/crypto; ok provos@, beck@Markus Friedl
tested with cryptosoft and kern.cryptodevallowsoft=1
2002-03-04parts that copy in PK parametersTheo de Raadt
2002-03-04remove old PK stuffTheo de Raadt
2002-03-04crypto_check_alg() is not neededTheo de Raadt
2002-03-02do some more renamingTheo de Raadt
2002-03-02initial cut at crypto_sop definitions for symmetric cryptoTheo de Raadt
2002-03-01sysctl for cryptodevallowsoft - /dev/crypto will allow the software engineNiels Provos
to be used if there are no hardware cards. mostly for debugging and regression.
2002-03-01remove CRYPTO_BUF_CONTIG and convert to handle iovs. okay deraadt@Niels Provos
2002-03-01helper functions for uio (cuio_apply and cuio_getptr) okay deraadt@Niels Provos
2002-02-24license repair, angelos okTheo de Raadt
2002-02-23sysctl kern.usercryptoTheo de Raadt
2002-02-08- Rename FILE_{,UN}USE to FREF and FRELE. USE is a bad verb and we don't haveArtur Grabowski
the same semantics as NetBSD anyway, so it's good to avoid name collissions. - Always fdremove before freeing the file, not the other way around. - falloc FREFs the file. - have FILE_SET_MATURE FRELE the file (It feels like a good ortogonality to falloc FREFing the file). - Use closef as much as possible instead of ffree in error paths of falloc:ing functions. closef is much more careful with the fd and can deal with the fd being forcibly closed by dup2. Also try to avoid manually calling *fo_close when closef can do that for us (this makes some error paths mroe complicated (sys_socketpair and sys_pipe), but others become simpler (sys_open)).
2002-01-29Remove the iov2pages/mbuf2pages API... All of the relevant arch's supportJason Wright
bus_dma(9) which actually does this job correctly.
2002-01-23It looks like there has been one crack smoking and a few cut and pastes.Artur Grabowski
PR_FREEHEADER should not be set in pool_init by the caller. It shouldn't be set in pool_init at all. Besides, it's going away soon anyway.
2002-01-23Pool deals fairly well with physical memory shortage, but it doesn't dealArtur Grabowski
well (not at all) with shortages of the vm_map where the pages are mapped (usually kmem_map). Try to deal with it: - group all information the backend allocator for a pool in a separate struct. The pool will only have a pointer to that struct. - change the pool_init API to reflect that. - link all pools allocating from the same allocator on a linked list. - Since an allocator is responsible to wait for physical memory it will only fail (waitok) when it runs out of its backing vm_map, carefully drain pools using the same allocator so that va space is freed. (see comments in code for caveats and details). - change pool_reclaim to return if it actually succeeded to free some memory, use that information to make draining easier and more efficient. - get rid of PR_URGENT, noone uses it.
2001-12-19sync KNF with src/usr.bin/sshMarkus Friedl
2001-11-13and for the case where it allocates a bunch at a time, also make sure theTheo de Raadt
software flag gets set.
2001-11-13incorrect checkTheo de Raadt
2001-11-13garbage in my last commitTheo de Raadt
2001-11-09be way more sure that software cannot be usedTheo de Raadt
2001-11-08indentTheo de Raadt
2001-11-06Replace inclusion of <vm/foo.h> with the correct <uvm/bar.h> when necessary.Miod Vallat
(Look ma, I might have broken the tree)
2001-10-26 - every new fd created by falloc() is marked as larval and should not be usedArtur Grabowski
any anyone. Every caller of falloc matures the fd when it's usable. - Since every lookup in the fd table must now check this flag and all of them do the same thing, move all the necessary checks into a function - fd_getfile.
2001-09-26RIPEMD-160 implementation based onMarkus Friedl
ftp://ftp.rsasecurity.com/pub/cryptobytes/crypto3n2.pdf, ok deraadt@
2001-09-13missing $OpenBSD:Markus Friedl
2001-09-03do not screw up the reference countsTheo de Raadt
2001-08-28Getting closer to working userland MAC.ben
2001-08-24KNFTheo de Raadt
2001-08-24switch to the optimised AES reference code fromMarkus Friedl
http://www.esat.kuleuven.ac.be/~rijmen/rijndael/rijndael-fst-3.0.zip the same code is used by ssh, so please make sure to update usr.sbin/ssh/rijndael.c if you change this code. tested on sparc (jason) and with swap encryption (me); ok deraadt@, provos@
2001-08-22add RC4 and SHA1 supportTheo de Raadt
2001-08-20Move param.h before systm.h so vax macros are picked up properly.Hugh Graham
2001-08-17Add RC4 support.ben
2001-08-12remove redundant vm includesMichael Shalayeff
2001-08-09Force alignment of blocks so that we don't crash on strict alignmentHeikki Korpela
archs. This is a stopgap until we get a rijndael implementation that doesn't assume 4 byte alignment. ok deraadt@
2001-08-08remove IPCOMP. derradt@ ok.Jean-Jacques Bernard-Gundol
2001-08-05put in tags for ARC4 to please ben, who now has no excusesTheo de Raadt
2001-07-31new BSD-style license and whitespace sync with opensshKevin Steves
2001-07-16Make gcc 3.0 happy. From Heikki Korpela <heko@iki.fi>Jean-Jacques Bernard-Gundol
2001-07-05#ifdef IPCOMP stuff properlyTheo de Raadt
2001-07-05KNFTheo de Raadt
2001-07-05Support for compression. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-07-05deflate algo, used by IPComp. Currently it won't be compiled until IPCompJean-Jacques Bernard-Gundol
is completely imported into the tree.
2001-07-05Stylistic changes.Angelos D. Keromytis
2001-07-05Compression support for IPComp. Include files only. angelos@ ok.Jean-Jacques Bernard-Gundol
2001-06-27KNFAngelos D. Keromytis
2001-06-27Indentation.Angelos D. Keromytis