bsd/nfs/nfs_gss.c

765 	 * Now we may have to check integrity or decrypt the results
774 		 * Here's what we expect in the integrity results:
776 		 * - length of seq num + results (4 bytes)
778 		 * - results (variable bytes)
780 		 * - checksum of seqnum + results (37 bytes)
782 		nfsm_chain_get_32(error, nmc, reslen);		// length of results
788 		/* Compute a checksum over the sequence number + results */
793 		 * Get the sequence number prepended to the results
807 		 * Advance to the end of the results and
812 		nfsm_chain_adv(error, &nmc_tmp, reslen);	// skip over the results
833 		 * Here's what we expect in the privacy results:
835 		 * - length of confounder + seq num + token + results
839 		 * - results (encrypted)
841 		nfsm_chain_get_32(error, nmc, reslen);		// length of results
847 		/* Get the token that prepends the encrypted results */
856 		reslen -= toklen;				// size of confounder + seqnum + results
858 		/* decrypt the confounder + sequence number + results */
862 		/* Compute a checksum over the confounder + sequence number + results */
874 		 * Get the sequence number prepended to the results
2192 			/* Compute a checksum over the sequence number + results */
2294  * The results aren't available yet, but if they need to be
2297  * for the results length, as well as the sequence number.
2299  * when the results are available.
2333  * The results are checksummed or encrypted for return to the client
2341 	mbuf_t mb, results;
2353 	 * and the second which holds just the results that we're going to
2357 	nfs_gss_nfsm_chain(nmc_res, mrep);		// set up the results chain
2359 	results = mbuf_next(mb);			// first mbuf in the results
2360 	reslen = nfs_gss_mchain_length(results);	// length of results
2371 		nfs_gss_append_chain(nmc_pre, results);	// Append the results mbufs
2373 		/* Now compute the checksum over the results data */
2374 		nfs_gss_cksum_mchain(ki, results, ALG_MIC(ki), 0, reslen, cksum);
2398 		/* Now compute the checksum over the results data */
2399 		nfs_gss_cksum_mchain(ki, results, ALG_WRAP(ki), 0, reslen, cksum);
2408 		nfs_gss_append_chain(nmc_pre, results);	// Append the results mbufs
2410 		/* Encrypt the confounder + seqnum + results */
2411 		nfs_gss_encrypt_mchain(ki, results, 0, reslen, DES_ENCRYPT);
2528 	sz = 7 * NFSX_UNSIGNED + nfsm_rndup(cp->gss_svc_tokenlen); // size of results
3133  * Append an args or results mbuf chain to the header chain