summaryrefslogtreecommitdiff
path: root/sys/dev/pci/ubsec.c
AgeCommit message (Collapse)Author
2001-07-04Add tests for segment lengths and total lengths bigger than the chip can handle.Jason Wright
Also, add a missing test for *2pages failure on destination buffers.
2001-07-02- More vtophys death: packet buffer lists are is bus_dma(9) memory as isJason Wright
the mac buffer - also, reenable aggregation code (accidentally removed)
2001-06-29move definitions around a bit and define a few more constantsJason Wright
2001-06-29allocate contexts during attach since we can't mess with them duringJason Wright
interrupts (the space allocation is wasteful, but more data will be moved into the allocation soon).
2001-06-23Correctly handle the IV_PRESENT flag.Angelos D. Keromytis
2001-06-23Conform to new prototype for crypto_register()Angelos D. Keromytis
2001-06-23merge crypto/crypto{dev,}.h to crypto/cryptodev.h, to avoid name conflicts ↵Theo de Raadt
inside OpenSSL codebase
2001-06-18kill a debug message that makes UBSEC_DEBUG uselessTheo de Raadt
2001-06-14OOPSTheo de Raadt
2001-06-14hackish auto-IV mode for IOV operationsTheo de Raadt
2001-06-12Make pci_mapreg_map take an extra argument where we canNiklas Hallqvist
put a size limitation of the PCI region to map. That makes the PERC 3/Di raid controller usable, as it publishes too much PCI memory for us to map in the kernel virtual memory. As we only access the first 256 byte it is of no use to map 128MB of kvm.
2001-06-08Put back bus_dmaification of context's (seems to have been fixed byJason Wright
recent changes to cryptosoft.c). So, mcr and pktbuf handling to go...
2001-05-30Un-bus_dma(9) mcr1 context and mcr operations (causes problems under load).Jason Wright
Reimplement mcr2 bus_dma handling.
2001-05-23- relax alignment constraintsJason Wright
- make sure dma_map is set to NULL on failure
2001-05-23bus_dmaify mcr handling (just leaves buffer lists and mac buffer to go...)Jason Wright
2001-05-22- delay allocation of rng handling structuresJason Wright
- if an rng operation is already in progress, don't setup a new timeout.
2001-05-22- Don't poll the rng more than 100 times a secondJason Wright
- bus_dmaify mcr2 operations (rng) - start bus_dma of mcr1 operations (context; mcr and pktbufs to go) ... more to come ...
2001-05-14kill agregate messages; reported by stephen@etunnels.comTheo de Raadt
2001-05-14use real uioTheo de Raadt
2001-05-13use criov_copydata for grabbing iv for next packetJason Wright
2001-05-13initial cut at /dev/crypto support. takes original mbuf "try, and discardTheo de Raadt
if we fail" semantics and extends to two varients of data movement: mbuf, or an iovec style block.
2001-05-13Initial support for Broadcom 5820, which is very much like the 5805 exceptJason Wright
that the packet context structure for ipsec has changed (added two fields and, annoyingly, rearranged several of them). The MCR2 operations (only RNG is used at this point) are supported, too.
2001-04-29When expanding the session table, only copy the number of sessions alreadyJason Wright
there to the new table; from stephen@etunnels.com (PR 1801).
2001-04-06typo in error messageJason Wright
2001-03-28Allow tdbi's to appear in mbufs throughout the stack; this allowsAngelos D. Keromytis
security properties of the packets to be pushed up to the application (not done yet). Eventually, this will be turned into a packet attributes framework. Make sure tdbi's are free'd/cleared properly whenever drivers (or NFS) does weird things with mbufs.
2001-03-25Fix potential dangling mbuf and potential double free. Thanks to Dawson and teamConstantine Sapuntzakis
2001-02-02The read/write indication bit in DMAERR reg is bit 1, not bit 0Jason Wright
also, add a mask for the address portion of DMAERR and use it
2001-01-31before copying the packet header, make sure we actually got the mbufJason Wright
2001-01-29grab rng stuff more often (now 6400bytes/sec)Jason Wright
document the other mcr2 operations and fix a printf (luckily it's never been called =)
2001-01-29- add infrastructure for dealing with the key generator (MCR2)Jason Wright
- add support for the onboard rng using that structure - add a interrupt status mask (differs for 5501 and 5601) - reorganize slightly to take into account that MCR1 isn't the only reason for interrupts.
2001-01-11oopsTheo de Raadt
2001-01-11move ich to auich at mickey's requestTheo de Raadt
2000-11-17*HMAC96->*HMACAngelos D. Keromytis
Bear in mind, you will need to recompile both isakmpd/ipsecadm and your kernel --- otherwise things won't work together. Naturally, all these changes will not be folded into -STABLE, since they would break binary compatibility.
2000-09-21styleJason Wright
2000-08-19- introduce new function ubsec_mcopy() which copies the header and trailerJason Wright
of one mbuf into another since ubsec doesn't copy data through - get all of the offsets right for the !nicealign case - style fixes Authentication/Encryption on the same packet now appears to work reliably
2000-08-17use destination lengths when trimming the output packet (cut and pasto)Jason Wright
2000-08-17- auth+enc sorta works: fixup all of the offsets for encryption/authenticationJason Wright
- also check for cases that ubsec cannot handle (and should not happen anyway) - actually use the destination length to trim the packet in the output descriptor - don't copy the IV into the packet unless it doesn't already have one (old debugging code...) - style fixes
2000-08-15use pci_mapreg_map, deallocate resources on failure in attachment; jason@ okMichael Shalayeff
2000-08-15Put the bcopy back in place for the decryption CRD_F_EXPLICIT_IV case (missedJason Wright
this yesterday when fixing the encryption side of this case). Only used for old IPSec xforms anyway.
2000-08-15don't forget the initial swizzling with IPAD for inner state (fixesJason Wright
auth-only mode which was broken with new session code).
2000-08-15- Can't avoid one of those bcopy's so easily (only happens with old ESPJason Wright
transforms... those with CRD_F_IV_EXPLICIT, so we can take the function call overhead there). - >> instead of << for coffset (auth+enc still isn't working, but this was an obvious bug). - #ifdef UBSEC_DEBUG out the auth-only debugging code
2000-08-13do iv copying by hand, to avoid bcopy overheadTheo de Raadt
2000-08-13fix session codeTheo de Raadt
2000-08-13not completely working session code from jasonTheo de Raadt
2000-08-13indentTheo de Raadt
2000-08-12mcr aggregation now works, best i have seen yet is 5 (huh?)Theo de Raadt
2000-08-11move mcr out of q; and write prelim mcr aggregation code, which does not yetTheo de Raadt
work for some reason or another, so it is currently disabled.
2000-07-31since byte order bugs are gone, interrupts work okTheo de Raadt
2000-07-29remove the (unused) sc_intrmask, and be more careful about initializingJason Wright
the BS_CTRL register... The BE32 & BE64 bits do NOT do what they imply, so leave the bits set, and add the ones we want. This allows ubsec to interop with our software implementation (at least for encryption). More work to be done in this driver though... Many thanks to Jimmy Ruane at Broadcom for the pointer about BE32 & BE64!
2000-07-20work around broken A0 5805 silicon that fails to set the status result word ↵Theo de Raadt
in the mcr