aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec/xform_esp.c
Commit message (Expand)AuthorAgeFilesLines
* opencrypto: Introduce crypto_dispatch_async()Mark Johnston2021-02-081-6/+8
* Add support for IPsec ESN and pass relevant information to crypto layerMarcin Wojtas2020-10-161-14/+104
* Implement anti-replay algorithm with ESN supportMarcin Wojtas2020-10-161-2/+3
* Simplify IPsec transform-specific teardown.John Baldwin2020-06-251-10/+6
* Use zfree() to explicitly zero IPsec keys.John Baldwin2020-06-251-3/+1
* Consistently include opt_ipsec.h for consumers of <netipsec/ipsec.h>.John Baldwin2020-05-291-0/+1
* Fix AES-CTR compatibility issue in ipsecMarcin Wojtas2020-05-261-1/+12
* Add support for optional separate output buffers to in-kernel crypto.John Baldwin2020-05-251-8/+4
* Don't pass bogus keys down for NULL algorithms.John Baldwin2020-05-021-3/+5
* Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin2020-05-021-25/+0
* Fix name of 3DES cipher in deprecation warning.John Baldwin2020-04-221-1/+1
* Deprecate 3des support in IPsec for FreeBSD 13.John Baldwin2020-04-221-1/+5
* Update comments about IVs used in IPsec ESP.John Baldwin2020-04-201-16/+30
* Generate IVs directly in esp_output.John Baldwin2020-04-201-4/+4
* Refactor driver and consumer interfaces for OCF (in-kernel crypto).John Baldwin2020-03-271-106/+67
* Fix m_pullup() problem after removing PULLDOWN_TESTs and KAME EXT_*macros.Bjoern A. Zeeb2019-12-011-6/+8
* Add support for dummy ESP packets with next header field equal toAndrey V. Elsukov2019-11-271-0/+7
* netinet*: replace IP6_EXTHDR_GET()Bjoern A. Zeeb2019-11-151-2/+9
* Make the warning intervals for deprecated crypto algorithms tunable.John Baldwin2019-06-111-5/+4
* Add deprecation warnings for IPsec algorithms deprecated in RFC 8221.John Baldwin2019-05-231-0/+23
* Replace read_random(9) with more appropriate arc4rand(9) KPIsConrad Meyer2019-04-041-1/+1
* OpenCrypto: Convert sessions to opaque handles instead of integersConrad Meyer2018-07-181-6/+6
* OCF: Add a typedef for session identifiersConrad Meyer2018-07-131-4/+5
* Set the proper vnet in IPsec callback functions.John Baldwin2018-03-201-0/+10
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-251-2/+0
* crypto(9) is called from ipsec in CRYPTO_F_CBIFSYNC mode. This is workingFabien Thomas2017-11-031-0/+4
* Disable IPsec debugging code by default when IPSEC_DEBUG kernel optionAndrey V. Elsukov2017-05-291-3/+3
* Fix possible double releasing for SA and SP references.Andrey V. Elsukov2017-05-231-0/+2
* Fix possible double releasing for SA reference.Andrey V. Elsukov2017-05-231-11/+14
* Merge projects/ipsec into head/.Andrey V. Elsukov2017-02-061-195/+130
* IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.Fabien Thomas2016-11-251-0/+2
* Use explicitly specified ivsize instead of blocksize when we mean IV size.Andrey V. Elsukov2015-11-161-7/+1
* Take extra reference to security policy before calling crypto_dispatch().Andrey V. Elsukov2015-09-301-0/+1
* Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsecJohn-Mark Gurney2015-08-041-81/+89
* these are comparing authenticators and need to be constant time...John-Mark Gurney2015-07-311-1/+1
* Clean up this header file...John-Mark Gurney2015-07-311-2/+0
* RFC4868 section 2.3 requires that the output be half... This fixesJohn-Mark Gurney2015-07-291-24/+6
* Summary: Fix LINT build. The names of the new AES modes were notGeorge V. Neville-Neil2015-07-101-3/+3
* Add support for AES modes to IPSec. These modes work both in software onlyGeorge V. Neville-Neil2015-07-091-48/+89
* Fix possible use after free due to security policy deletion.Andrey V. Elsukov2015-04-271-2/+5
* Change ipsec_address() and ipsec_logsastr() functions to take twoAndrey V. Elsukov2015-04-181-29/+30
* Remove now unused mtag argument from ipsec*_common_input_cb.Andrey V. Elsukov2014-12-111-2/+2
* Remove code related to PACKET_TAG_IPSEC_IN_CRYPTO_DONE mbuf tag.Andrey V. Elsukov2014-12-111-72/+34
* Remove route chaching support from ipsec code. It isn't used for some time.Andrey V. Elsukov2014-12-021-1/+0
* Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed.Gleb Smirnoff2014-11-071-2/+2
* Provide includes that are needed in these files, and before were readGleb Smirnoff2013-10-261-0/+2
* Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,Andrey V. Elsukov2013-07-091-3/+9
* Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP,Andrey V. Elsukov2013-06-201-28/+28
* Remove unused 'plen' variable.Pawel Jakub Dawidek2011-11-261-2/+1
* The esp_max_ivlen global variable is not needed, we can just usePawel Jakub Dawidek2011-11-261-16/+1