Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFC r228610:

Use NO_WCAST_ALIGN for sbin/gbde, this is more appropriate to fix the
alignment warnings than using WARNS=3, and it also works for clang.

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

MFtbemd:

Prefer MACHNE_CPUARCH to MACHINE_ARCH in most contexts where you want
to test of all the CPUs of a given family conform.

Bump WARNS where possible.

Checked by: make universe
Approved by: ed (co-mentor)

Make the regression test run also with obj directories.

Moved libgeom.so dependencies to where they belong.

Reviewed by: phk
Approved by: re (scottl)

Normalize, fix ``make checkdpadd''.

Don't pull in geom_enc.c any more.

Use new GEOM OAM. Kernels have supported this for a number of days, so
people should be OK.

Solve another bug in the mapping code: correctly skip lock sectors.
Make sure sector zero is protected if it contains metadata.

Lower WARNS for gbde to 3 on non-i386 archs. rijndael-fst is evil
but appearntly does the right thing and passes the test-vectors.

MFC Candidate.

A couple of stylistic improvements.

Run a revision on the GBDE encryption facility.

Replace ARC4 with SHA2-512.
Change lock-structure encoding to use random ordering rather for obscurity.
Encrypt lock-structure with AES/256 instead of AES/128.
Change kkey derivation to be MD5 hash based.
Watch for malloc(M_NOWAIT) failures and ditch our cache when they happen.
Remove clause 3 of the license with NAI Labs consent.

Many thanks to "Lucky Green" <shamrock@cypherpunks.to> and "David
Wagner" <daw@cs.berkeley.edu>, for code reading, inputs and
suggestions.

This code has still not been stared at for 10 years by a gang of
hard-core cryptographers. Discretion advised.

NB: These changes result in the on-disk format changing: dump/restore needed.

Sponsored by: DARPA & NAI Labs.

I overlooked an absolute path.

Submitted by: Henric Jungheim <henric@attbi.com>

Use .PATH instead of VPATH.

Fix typo in man-page: man-section is 8.

Complete the Geom Based Disk Encryption: Add the OAM utility.

Sponsored by: DARPA and NAI Labs