summaryrefslogtreecommitdiff
path: root/sys/netinet/ip_esp.c
AgeCommit message (Expand)Author
2016-08-18fix panics caused by replacing m_copym2 with m_dup_pkt.David Gwynne
2016-08-15replace the last uses of m_copym2 with m_dup_pkt.David Gwynne
2016-03-07Sync no-argument function declaration and definition by adding (void).Christian Weisgerber
2015-12-09Remove plain DES encryption from IPsec.Christian Weisgerber
2015-11-03Plumb Chacha20-Poly1305 into the IPsec/ESP and PF_KEY frameworksMike Belopuhov
2015-07-15m_freem() can handle NULL, do not check for this condition beforehands.Theo de Raadt
2015-06-15No need for an extra local variable; no functional change.Mike Belopuhov
2015-06-15Use proper argument type for crp_callback functions; no functional change.Mike Belopuhov
2015-04-17Stubs and support code for NIC-enabled IPsec bite the dust.Mike Belopuhov
2015-04-14make ipsp_address thread safe; ok mpiMike Belopuhov
2014-12-19unifdef INET in net code as a precursor to removing the pretend option.Ted Unangst
2014-12-05Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>.Martin Pieuchot
2014-11-18move arc4random prototype to systm.h. more appropriate for most codeTed Unangst
2014-07-22Fewer <netinet/in_systm.h> !Martin Pieuchot
2014-07-12add a size argument to free. will be used soon, but for now default to 0.Ted Unangst
2014-07-09bpf code surgery / shuffling / simplification.Henning Brauer
2014-01-09bzero/bcmp -> memset/memcmp. ok matthewTed Unangst
2013-04-11Remove the extern keyword from function declarations, documentMartin Pieuchot
2013-02-14Merge of an original work by markus@ and gerhard@ to increaseMike Belopuhov
2012-10-18simplify checkreplaywindow() API; make call/return code handling consistentMarkus Friedl
2012-09-20spltdb() was really just #define'd to be splsoftnet(); replace the formerBret Lambert
2012-09-18remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not setMarkus Friedl
2012-06-29Add support for the Extended (64-bit) Sequence Number as definedMike Belopuhov
2011-01-11for key material that is being being discarded, convert bzero() toTheo de Raadt
2010-12-21don't leak mbuf if padding failes; ok mikeb@Markus Friedl
2010-10-06Retire SkipjackMike Belopuhov
2010-09-23remove m_pad in favor of m_inject as it's equivalent to m_injectMike Belopuhov
2010-09-22Support for AES-GCM-16 and ENCR_NULL_AUTH_AES_GMAC in ESP as perMike Belopuhov
2010-07-20Switch some obvious network stack MAC comparisons from bcmp() toMatthew Dempsky
2010-07-09Add support for using IPsec in multiple rdomains.Reyk Floeter
2010-07-02m_copyback can fail to allocate memory, but is a void fucntion so gymnasticsBret Lambert
2010-07-01Allow to specify an alternative enc(4) interface for an SA. AllReyk Floeter
2010-06-29Replace enc(4) with a new implementation as a cloner device. We stillReyk Floeter
2010-01-10Fix two bugs in IPsec/HMAC-SHA2:Markus Friedl
2008-06-09rename arc4random_bytes => arc4random_buf to match libc's nicer name;Damien Miller
2007-11-19Remove the #define ENCDEBUG that slipped through somehow.Marco Pfatschbacher
2007-10-17Convert MALLOC/FREE to malloc/free.Hans-Joerg Hoexer
2007-10-06Oops. Forgot to do FREE -> free when I did MALLOC -> malloc.Kenneth R Westerback
2007-10-03MALLOC+bzero -> malloc+M_ZERO.Kenneth R Westerback
2006-12-15make enc(4) count; ok markus@ henning@ deraadt@Otto Moerbeek
2006-09-21ugly trailing ws; from bret dot lambert at gmailOtto Moerbeek
2006-05-28Only preemptively increase the replay counter for outbound TDBs.Ryan Thomas McBride
2006-03-25allow bpf(4) to ignore packets based on their direction (inbound orDamien Miller
2005-12-20use M_READONLY when trying to find out whether we have to copyMarkus Friedl
2005-08-05don't panic for SADB_ADD w/o enc/auth, with and ok hshoexer@Markus Friedl
2005-08-02use arc4random for random packet padding (largely acedemic because it isDamien Miller
2005-07-31Introduce bpf_mtap_af and bpf_mtap_hdr to be used when passing a mbuf chainChristopher Pascoe
2005-05-28Add SA replay counter synchronization to pfsync(4). Required for IPsecHakan Olsson
2005-05-27comment out unused PACKET_TAG_IPSEC_IN_CRYPTO_DONE code; ok hshoexerMarkus Friedl
2005-05-25AESCTR support for ESP (RFC 3686); ok hshoexerMarkus Friedl