Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Fix gcc build: preserve const qualifier when casting input values.

Noticed by: bz@
Submitted by: dim@

Constify the AES code and propagate to consumers. This allows us to
update the Fortuna code to use SHAd-256 as defined in FS&K.

Approved by: so (self)

NO_MAN= has been deprecated in favor of MAN= for some time, go ahead
and finish the job. ncurses is now the only Makefile in the tree that
uses it since it wasn't a simple mechanical change, and will be
addressed in a future commit.

Make test00 compilable again.

Assert proper key size also in userland by defining KASSERT in !_KERNEL case.

Unbreak the world build (in sbin/gbde). This file is used by both
kernel and world, so KASSERT() needs to be wrapped within an #ifdef
_KERNEL / #endif pair.

Reported by: krion, tinderbox

Check key size for rijndael, as invalid key size can lead to kernel panic.
It checked other algorithms against this bug and it seems they aren't
affected.

Reported by: Mike Tancsa <mike@sentex.net>
PR: i386/84860
Reviewed by: phk, cperciva(x2)

gbde(8) is also rejndael user.

Reported by: phk

just use crypto/rijndael, and nuke opencrypto/rindael.[ch].
the two became almost identical since latest KAME merge.

Discussed with: sam

integrate rijndael-alg-fst.h into rijndael.h.

stop including rijndael-api-fst.h from rijndael.h.
this is required to integrate opencrypto into crypto.

Start the dreaded NOFOO -> NO_FOO conversion.

OK'ed by: core

For variables that are only checked with defined(), don't provide
any fake value.

avoid module name conflict with opencrypto/rijndael.c.

Reported by: tinderbox

cleanup rijndael API.
since there are naming conflicts with opencrypto, #define was
added to rename functions intend to avoid conflicts.

Obtained from: KAME

rijndael-alg-fst.[ch]:
- redo updating.

rijndael-api-fst.[ch]:
- switch to use new low level rijndael api.
- stop using u8, u16 and u32.
- space cleanup.

Tested by: gbde(8) and phk's test program

Add a testcase which validates that the same buffer can be passed to
rijndael_blockDecrypt() as both input and output.

This property is important because inside rijndael we can get away
with allocating just a 16 byte "work" buffer on the stack (which
is very cheap), whereas the calling code would need to allocate the
full sized buffer, and in all likelyhood would have to do so with
an expensive malloc(9).

- revert to old rijndael code. new rijndael code broke gbde.
- since aes-xcbc-mac and aes-ctr require functions in new
rijndael code, aes-xcbc-mac and aes-ctr are disabled for now.

Fix alignment problem on 64 bit arch.
I only tested if it doesn't break anything on i368. Since I
have no 64 bit machine, I cannot test it, actually.

Reported by: jmallett

simplify and update rijndael code.

Obtained from: KAME

one more opossite conditiion.

Reported by: "lg" <zevlg@yandex.ru>

condition of padLen check was opposite.

Reported by: "lg" <zevlg@yandex.ru>
Reviewed by: Lev Walkin <vlm@netli.com>

Use __FBSDID().

Don't panic when we can just return an error code.

Fixed AES encryption algorithm bug

PR: kern/38465
Obtained from: Ramana Yarlagadda <ramana.yarlagadda@analog.com>

Remove macros that are defined elsewhere.

less warning

warning: cast discards qualifiers from pointer target type

Sync with recent KAME.
This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

TODO:
- The definitions of SADB_* in sys/net/pfkeyv2.h are still different
from RFC2407/IANA assignment because of binary compatibility
issue. It should be fixed under 5-CURRENT.
- ip6po_m member of struct ip6_pktopts is no longer used. But, it
is still there because of binary compatibility issue. It should
be removed under 5-CURRENT.

Reviewed by: itojun
Obtained from: KAME
MFC after: 3 weeks

Kernel crypto need binary key material, not symbolic ascii.

This commit was generated by cvs2svn to compensate for changes in r67957,
which included commits to RCS files with non-trunk default branches.