src/sys/crypto, branch main

i386: mark the stack as non-executable

2026-04-17T04:44:18+00:00

Sponsored by:		Netflix
Reviewed by:		jhb
Differential Revision:	https://reviews.freebsd.org/D56411

crypto/openssl: update artifacts to match 3.5.6 release artifacts

2026-04-09T01:55:43+00:00

A new manpage and any associated links will be added in the next commit.

MFC after:      1 day (the security issues warrant a quick backport).
MFC with:	10a428653ee7216475f1ddce3fb4cbf1200319f8

ccp: Don't name anonymous structure and union types

2026-02-24T20:25:45+00:00

Keep the dword labels as comments instead.  Anonymous structs and
unions don't have type names in C11+.

Differential Revision:	https://reviews.freebsd.org/D55144

OpenSSL: commit sys/crypto changes for 3.5.5

2026-02-01T17:05:55+00:00

These files were changed as part of the 3.5.4 -> 3.5.5 upgrade. Please
see the upstream release notes linked in
1731fc70f7344af08db49b06c63c963fa12ee354, et al, for more details.

MFC after:	6 days
MFC with:	1731fc70f7344af08db49b06c63c963fa12ee354
Fixes:	1731fc70f7344af08d ("OpenSSL: update vendor sources to match 3.5.5 content")

crypto: Update sha256 and sha512 ifuncs to use passed HWCAP flags

2026-01-13T15:28:04+00:00

Reviewed by:	andrew
Sponsored by:   Arm Ltd
Differential Revision:	https://reviews.freebsd.org/D54600

crypto: avoid warnings about too-long initializer strings

2025-12-30T12:46:46+00:00

Mark `sigma` and `tau` as `__non_string`, to avoid warnings from clang
21 similar to:

    sys/crypto/chacha20/chacha.c:53:31: error: initializer-string for character array is too long, array size is 16 but initializer has size 17 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
       53 | static const char sigma[16] = "expand 32-byte k";
          |                               ^~~~~~~~~~~~~~~~~~
    sys/crypto/chacha20/chacha.c:54:29: error: initializer-string for character array is too long, array size is 16 but initializer has size 17 (including the null terminating character); did you mean to use the 'nonstring' attribute? [-Werror,-Wunterminated-string-initialization]
       54 | static const char tau[16] = "expand 16-byte k";
          |                             ^~~~~~~~~~~~~~~~~~

MFC after:	3 days
Reviewed by:	markj
Differential Revision: https://reviews.freebsd.org/D54364

sys/crypto: import md5c.c C rewrite

2025-10-24T10:16:58+00:00

The reimplementation is a bit cleaner than the original code,
although it is also slightly slower. This shouldn't matter too
much as we will have asm code for the major platforms.

The code is unrolled when built in the kernel or user space, but
not when in libsa, as to reduce the code size.

Differential Revision:	https://reviews.freebsd.org/D45670
Reviewed by:	jrtc27, imp
Approved by:	markj (mentor)
MFC after:	1 month

sys: move sys/kern/md[45].c to sys/crypto

2025-10-24T10:16:46+00:00

Both files are used by kernel and userspace.
Move them to sys/crypto where they belong.

No functional changes intended.

In preparation of D45670.

Reviewed by:	markj
Approved by:	markj (mentor)
MFC after:	1 month
Differential Revision:	https://reviews.freebsd.org/D52909

style(9): white space after ; and around binary operators

2025-10-16T22:02:50+00:00

in for() loops.  Also, use 'while', where only the
conditional test of 'for' was used.

Reviewed by: sjg

ossl: Add GCM support on powerpc64/powerpc64le (POWER8+)

2025-09-11T16:08:05+00:00

Separate ossl's existing AES-NI GCM implementation into a common
ossl_aes_gcm.c and add conditionals to switch between OpenSSL's AES-NI
and POWER8 GCM routines depending on the architecture. Since the
existing AVX-512 implementation is less agnostic, move it into a
separate ossl_aes_gcm_avx512.c.

Reviewed by:	markj
MFC after:	1 month
Differential Revision:	https://reviews.freebsd.org/D44274