src/sys/opencrypto/cryptodev.h, branch stable/14

sys: Remove $FreeBSD$: one-line .c comment pattern

2023-08-16T17:54:24+00:00

Remove /^/[*/]\s*\$FreeBSD\$.*\n/

opencrypto: Add a routine to copy a crypto buffer cursor

2022-02-16T02:47:10+00:00

This was useful in converting armv8crypto to use buffer cursors.  There
are some cases where one wants to make two passes over data, and this
provides a way to "reset" a cursor.

Reviewed by:	jhb
MFC after:	1 month
Differential Revision:	https://reviews.freebsd.org/D28949

opencrypto/cryptodev.h: Add includes to make more self-contained.

2022-01-25T23:20:46+00:00

Reviewed by:	markj, emaste
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D34021

crypto: Add support for the XChaCha20-Poly1305 AEAD cipher.

2022-01-11T22:16:41+00:00

This cipher is a wrapper around the ChaCha20-Poly1305 AEAD cipher
which accepts a larger nonce.  Part of the nonce is used along with
the key as an input to HChaCha20 to generate a derived key used for
ChaCha20-Poly1305.

This cipher is used by WireGuard.

Reviewed by:	markj
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D33523

OCF: Add crypto_clonereq().

2022-01-04T22:22:12+00:00

This function clones an existing crypto request, but associates the
new request with a specified session.  The intended use case is for
drivers to be able to fall back to software by cloning a request and
dispatch it to an internally allocated software session.

Reviewed by:	markj
Sponsored by:	Chelsio Communications
Differential Revision:	https://reviews.freebsd.org/D33607

cryptodev.h: Drop 'extern' from function prototypes.

2021-12-21T20:33:49+00:00

Sponsored by:	Chelsio Communications

crypto: Define POLY1305_BLOCK_LEN constant.

2021-12-16T21:47:16+00:00

Reviewed by:	markj
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D33485

crypto: Support multiple nonce lengths for AES-CCM.

2021-10-06T21:08:47+00:00

Permit nonces of lengths 7 through 13 in the OCF framework and the
cryptosoft driver.  A helper function (ccm_max_payload_length) can be
used in OCF drivers to reject CCM requests which are too large for the
specified nonce length.

Reviewed by:	sef
Sponsored by:	Chelsio Communications, The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D32111

cryptodev: Permit explicit IV/nonce and MAC/tag lengths.

2021-10-06T21:08:46+00:00

Add 'ivlen' and 'maclen' fields to the structure used for CIOGSESSION2
to specify the explicit IV/nonce and MAC/tag lengths for crypto
sessions.  If these fields are zero, the default lengths are used.

This permits selecting an alternate nonce length for AEAD ciphers such
as AES-CCM which support multiple nonce leengths.  It also supports
truncated MACs as input to AEAD or ETA requests.

Reviewed by:	markj
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D32107

crypto: Constify all transform descriptors

2021-07-26T20:41:05+00:00

No functional change intended.

Reviewed by:	ae, jhb
MFC after:	1 week
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D31196