aboutsummaryrefslogtreecommitdiff
path: root/sys/geom/eli
Commit message (Expand)AuthorAgeFilesLines
* Fix information leak in geli(8) integrity modeConrad Meyer2017-09-091-1/+9
* Hide length of geli passphrase during boot.Mariusz Zaborski2017-08-263-2/+41
* Dump md_iterations as signed, which it really is.Alexander Motin2017-04-211-1/+1
* Always allow setting number of iterations for the first time.Alexander Motin2017-04-211-1/+3
* Implement boot-time encryption key passing (keybuf)Allan Jude2017-04-012-94/+145
* sys/geom/eli: Switch bzero() to explicit_bzero() for sensitive dataAllan Jude2017-03-313-60/+56
* improve PBKDF2 performanceAllan Jude2017-02-193-28/+35
* Fix alignment issues on MIPS: align the pointers properly.Ruslan Bukin2016-10-312-3/+14
* Removal of Giant droping wrappers for GEOM classes.Konstantin Belousov2016-05-201-2/+0
* Add support for managing Shingled Magnetic Recording (SMR) drives.Kenneth D. Merry2016-05-191-0/+2
* Add an EARLY_AP_STARTUP option to start APs earlier during boot.John Baldwin2016-05-141-1/+3
* Create the GELIBOOT GEOM_ELI flagAllan Jude2016-04-083-1/+35
* Make additional parts of sys/geom/eli more usable in userspaceAllan Jude2016-01-076-184/+251
* Replace sys/crypto/sha2/sha2.c with lib/libmd/sha512c.cAllan Jude2015-12-271-1/+2
* Fix g_eli error loss conditionsSteven Hartland2015-11-051-9/+9
* Enable BIO_DELETE passthru in GELI, so TRIM/UNMAP can work as expected whenPawel Jakub Dawidek2015-08-083-35/+92
* After crypto_dispatch() bio might be already delivered and destroyed,Pawel Jakub Dawidek2015-08-062-14/+8
* Spoil even can happen for some time now even on providers opened exclusivelyPawel Jakub Dawidek2015-07-101-3/+3
* Properly propagate errors in metadata reading.Pawel Jakub Dawidek2015-07-021-1/+4
* Allow to omit keyfile number for the first keyfile.Pawel Jakub Dawidek2015-07-021-0/+7
* Add some new modes to OpenCrypto. These modes are AES-ICM (can be usedJohn-Mark Gurney2014-12-123-3/+3
* Populate the GELI passphrase cache with the kern.geom.eli.passphraseColin Percival2014-10-221-0/+19
* Cache GELI passphrases entered at the console during the boot process,Colin Percival2014-09-161-7/+38
* use a straight buffer instead of an iov w/ 1 segment... The aesniJohn-Mark Gurney2014-09-043-56/+10
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-282-13/+6
* Revert r267961, r267973:Glen Barber2014-06-272-6/+13
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-272-13/+6
* - Fix the keyfile being cleared prematurely after r259428Brad Davis2014-06-061-1/+1
* In g_eli_crypto_hmac_init(), zero out after using the ipad buffer,Xin LI2014-02-081-0/+1
* Clear some more places with potentially sensitive data.Pawel Jakub Dawidek2013-12-151-0/+2
* Clear content of keyfiles loaded by the loader after processing them.Pawel Jakub Dawidek2013-12-151-0/+1
* Add missing line breaks.Andrey V. Elsukov2013-11-111-2/+2
* When zero'ing out a buffer, make sure we are using right size.Xin LI2013-11-021-4/+4
* Make ELI destruction (including orphanization) less aggressive, making itAlexander Motin2013-09-021-10/+12
* Always initialize sc_ekey, because as of r238116 it is always used.Pawel Jakub Dawidek2012-08-101-12/+13
* Use correct part of the Master-Key for generating encryption keys.Pawel Jakub Dawidek2012-07-044-6/+27
* Correct comment.Pawel Jakub Dawidek2012-07-041-1/+1
* Correct a comment and correct style of a flag check.Pawel Jakub Dawidek2012-07-041-2/+2
* Add missing period at the end of the error messageEitan Adler2012-05-131-2/+2
* Clarify error that geli generatesEitan Adler2012-05-091-3/+4
* replace uses of libkern gets with cngetsAndriy Gapon2011-12-171-1/+2
* Before this change when GELI detected hardware crypto acceleration it willPawel Jakub Dawidek2011-10-272-12/+5
* Add support for creating GELI devices with older metadata version for usePawel Jakub Dawidek2011-10-252-5/+56
* When decoding metadata, check magic string, so we know this is not GELI devicePawel Jakub Dawidek2011-10-251-0/+2
* Prefer G_ELI_VERSION_* defines for version numbers over plain digits.Pawel Jakub Dawidek2011-10-251-3/+5
* Fit lines into 80 chars.Pawel Jakub Dawidek2011-10-251-4/+6
* When metadata is at newer version than the highest supported, returnPawel Jakub Dawidek2011-10-251-1/+1
* Include sys/sbuf.h directly.Andrey V. Elsukov2011-07-111-0/+1
* MFCAttilio Rao2011-05-151-0/+1
|\
| * Fix a memory leak possible in g_eli_key_allocate() if the key with theMikolaj Golub2011-05-151-0/+1