MFC 331417,331597: Add the cryptocheck test tool.

331417:
Bring in JHB's cryptocheck tool

It can be used to validate basic algorithm correctness on a variety of inputs,
by comarison to openssl.

While here, add some sanity to the crypto/Makefile.

The tool may not be perfect, but getting it in tree where collaboration can
happen is a nice first step. The pace of development outside of svn seems
to have slowed down mid-2017.

331597:
Update the license to note my work on cryptocheck was sponsored.

Sponsored by: Chelsio Communications

MFC 318090,319475: Use const with some read-only buffers in opencrypto APIs.

318090:
Use const with some read-only buffers in opencrypto APIs.

- Mark the source buffer for a copyback operation as const in the kernel
API.
- Use const with input-only buffers in crypto ioctl structures used with
/dev/crypto.

319475:
Fix some new errors and a warning in cryptotest.

- Use a new 'char *key' to allocate storage for keys and assign the
pointer to the session2_op 'const char *' members after the key is
initialized.
- Mark the 'find' variable used in crfind() static so that crfind()
doesn't return a pointer to stack garbage.

Sponsored by: Chelsio Communications

MFC: 305066,305304,305312

Update cryptotest for modern algorithms
Clean up the usage message and remove dead code.
Add cpuset support to separate forked processes.

Reviewed by: cem
Sponsored by: Rubicon Communications, LLC (Netgate)

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

- Replace N(a)/N(i)/N(T)/LEN(a)/ARRAY_SIZE(a) with nitems()
- Add missing <err.h> for err() and <sys/sysctl.h> for sysctlbyname()
- NULL -> 0 for 5th parameter of sysctlbyname()

Submitted by: Andriy Voskoboinyk <s3erios@gmail com>
Differential Revision: https://reviews.freebsd.org/D3442

Include stdint.h to fix build.

Pointed by: Olivier Cochard-Labbé

Prepare network statistics structures for migration to PCPU counters.
Use uint64_t as type for all fields of structures.

Changed structures: ahstat, arpstat, espstat, icmp6_ifstat, icmp6stat,
in6_ifstat, ip6stat, ipcompstat, ipipstat, ipsecstat, mrt6stat, mrtstat,
pfkeystat, pim6stat, pimstat, rip6stat, udpstat.

Discussed with: arch@

Increase cryptotest tool initialization vector (IV) size.

This fixes potential out-of-bound accesses when testing ciphers with block size
greater than 8 bytes (e.g. AES).

Submitted by: Bartlomiej Sieka tur ! semihalf dot com
Discussed with: pjd, sam

Add missing includes and correct argument to sysctlbyname

PR: misc/120274
MFC after: 1 week

Update structure name to follow the new IPsec code.

Reported by: phk
Approved by: re

Overhaul driver/subsystem api's:
o make all crypto drivers have a device_t; pseudo drivers like the s/w
crypto driver synthesize one
o change the api between the crypto subsystem and drivers to use kobj;
cryptodev_if.m defines this api
o use the fact that all crypto drivers now have a device_t to add support
for specifying which of several potential devices to use when doing
crypto operations
o add new ioctls that allow user apps to select a specific crypto device
to use (previous ioctls maintained for compatibility)
o overhaul crypto subsystem code to eliminate lots of cruft and hide
implementation details from drivers
o bring in numerous fixes from Michale Richardson/hifn; mostly for
795x parts
o add an optional mechanism for mmap'ing the hifn 795x public key h/w
to user space for use by openssl (not enabled by default)
o update crypto test tools to use new ioctl's and add cmd line options
to specify a device to use for tests

These changes will also enable much future work on improving the core
crypto subsystem; including proper load balancing and interposing code
between the core and drivers to dispatch small operations to the s/w
driver as appropriate.

These changes were instigated by the work of Michael Richardson.

Reviewed by: pjd
Approved by: re

make cryptotest compile after the latest changes to cryptodev.h

Add missing stats.hst_nodesc statistics.

ioctl(2) commands are u_long not int.
Pass zero for sysctl new argument length, not NULL);

new version of cryptotest (w/ only code from me)

Reviewed by: imp

Remove references to cryptotest

Theo de Raadt has brought to our attention that he wrote at least part
file and that he has not released it under a free license. Until the
matter can be resolved, honor his claim and remove it.

PR: misc/61676

add install rule

add stat dumper for the safenet driver

Merge from private version:

o add hash operations
o make AES operations useful: split into 3 ops based on key length (specify
aes for AES w/ 128 bit keys, aes192 for 192-bit keys, and aes256 for
256-bit keys
o add -c option to force encrypt->decrypt result to be compared against the
original plaintext (need to compare it against a known good implementation
like openssl)
o change multi-threaded test output to be more meaningingful
o fix default block size selection to consider algorithm's blocking needs

add missing %u to show mcr1full count

o add missing copyright notices
o new hifnstats program to dump hifn driver statistics
o new ipsecstats program to dump fast ipsec statistics

use relative pathname to driver-private file (instead of absolute)

add simple program to dump ubsec driver statistics

o add -b option to enable batching
o add #ifdef __FreeBSD__'s around the profiling so the code compiles on openbsd
o update a comment about expected performance for Broadcom hardware

more crypto test stuff:

o cryptotest can now run multiple threads with -t option
o cryptotest can now "profile" time spent doing symmetric ops with -p
o cryptostats dumps the crypto statistics block
o cryptokeystat is an openbsd app that tests public key ops

add program used to exercise/test /dev/crypto symmetric crypto functionality

Obtained from: openbsd (originally)