| #
302408 |
|
07-Jul-2016 |
gjb |
Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.
Additional commits post-branch will follow.
Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation |
| #
285381 |
|
11-Jul-2015 |
jmg |
some additional improvements to the documentation...
Sponsored by: Netflix, Inc.
|
| #
285296 |
|
08-Jul-2015 |
jmg |
yet more documentation improvements... Many changes were made to the
OCF w/o documentation...
Document the new (8+ year old) device_t way of handling things, that
_unregister_all will leave no threads in newsession, the _SYNC flag,
the requirement that a flag be specified...
Other minor changes like breaking up a wall of text into paragraphs...
|
| #
285070 |
|
03-Jul-2015 |
jmg |
more word smithing wrt the crd_inject field...
We've already defined IV earlier, so no need to expand it a second
time here...
|
| #
285065 |
|
02-Jul-2015 |
jmg |
update the documentation of the _IV_ flags... _IV_PRESENT doesn't
mean what you think it should... This will be fixed in the future
with a flag rename, but document what the flag really does and make
the _IV_ flags clear what their presents (or lack there of) means...
Reviewed by: gnn, eri (both earlier version)
|
| #
275732 |
|
12-Dec-2014 |
jmg |
Add some new modes to OpenCrypto. These modes are AES-ICM (can be used
for counter mode), and AES-GCM. Both of these modes have been added to
the aesni module.
Included is a set of tests to validate that the software and aesni
module calculate the correct values. These use the NIST KAT test
vectors. To run the test, you will need to install a soon to be
committed port, nist-kat that will install the vectors. Using a port
is necessary as the test vectors are around 25MB.
All the man pages were updated. I have added a new man page, crypto.7,
which includes a description of how to use each mode. All the new modes
and some other AES modes are present. It would be good for someone
else to go through and document the other modes.
A new ioctl was added to support AEAD modes which AES-GCM is one of them.
Without this ioctl, it is not possible to test AEAD modes from userland.
Add a timing safe bcmp for use to compare MACs. Previously we were using
bcmp which could leak timing info and result in the ability to forge
messages.
Add a minor optimization to the aesni module so that single segment
mbufs don't get copied and instead are updated in place. The aesni
module needs to be updated to support blocked IO so segmented mbufs
don't have to be copied.
We require that the IV be specified for all calls for both GCM and ICM.
This is to ensure proper use of these functions.
Obtained from: p4: //depot/projects/opencrypto
Relnotes: yes
Sponsored by: FreeBSD Foundation
Sponsored by: NetGate
|
| #
267936 |
|
26-Jun-2014 |
bapt |
use .Mt to mark up email addresses consistently (part6)
PR: 191174
Submitted by: Franco Fichtner <franco at lastsummer.de>
|
| #
264673 |
|
19-Apr-2014 |
jmg |
add link to crypto(4)...
MFC after: 1 week
|
| #
233510 |
|
26-Mar-2012 |
joel |
mdoc: terminate quoted strings.
Reviewed by: brueffer
|
| #
231564 |
|
12-Feb-2012 |
ed |
Globally replace u_int*_t from (non-contributed) man pages.
The reasoning behind this, is that if we are consistent in our
documentation about the uint*_t stuff, people will be less tempted to
write new code that uses the non-standard types.
I am not going to bump the man page dates, as these changes can be
considered style nits. The meaning of the man pages is unaffected.
MFC after: 1 month
|
| #
211356 |
|
15-Aug-2010 |
brueffer |
Fixed a typo.
PR: 148701
Submitted by: Glen Barber <glen.j.barber@gmail.com>
MFC after: 1 week
|
| #
172247 |
|
19-Sep-2007 |
brueffer |
Update the table of supported algorithms:
- Group hash functions together and sort
- Add CRYPTO_CAMELLIA_CBC (1)
PR: 116471
Submitted by: Philip Schulz <phs@deadc0.de> (1)
Approved by: re (blanket)
|
| #
165213 |
|
14-Dec-2006 |
mpp |
Spelling fixes.
|
| #
162404 |
|
18-Sep-2006 |
ru |
Markup fixes.
|
| #
159214 |
|
03-Jun-2006 |
pjd |
Document more bits.
Reviewed by: brd
|
| #
158850 |
|
23-May-2006 |
pjd |
Document missing CRYPTO_F_ flags.
|
| #
158708 |
|
17-May-2006 |
pjd |
Update HMAC algorithms.
|
| #
158707 |
|
17-May-2006 |
pjd |
Update manual page: cri_rnd field is gone, cri_mlen field was added.
|
| #
157636 |
|
10-Apr-2006 |
pjd |
Remove redundant 'from'.
|
| #
157635 |
|
10-Apr-2006 |
pjd |
Document CRD_F_KEY_EXPLICIT flag. While here more flags description more
readable.
MFC after: 2 weeks
|
| #
147647 |
|
28-Jun-2005 |
hmp |
Use 'manual page' instead of 'man page' for consistency.
Approved by: re (hrs)
|
| #
109992 |
|
28-Jan-2003 |
sam |
fix pathname typo
Submitted by: Jim Geovedi <negative@magnesium.net>
|
| #
105272 |
|
16-Oct-2002 |
ru |
mdoc(7) police: markup and spelling fixes.
Prodded by: phk
|
| #
105125 |
|
14-Oct-2002 |
sam |
update to better reflect reality:
o describe additional argument in driver callbacks
o describe flow-control mechanism for processing crypto requests
o remove old cruft
o remove openbsd-specific cruft
o fixup some references
o yada yada ...
|
| #
104488 |
|
04-Oct-2002 |
sam |
manual pages for the new kernel crypto support (need work)
Obtained from: openbsd
|