Changes in Makefile

d5cbcae3 - Add an implementation of CHACHA20_POLY1305 to cryptosoft.

Thu, 18 Feb 2021 17:22:18 +0000

Add an implementation of CHACHA20_POLY1305 to cryptosoft.This uses the chacha20 IETF and poly1305 implementations fromlibsodium. A seperate auth_hash is created for the auth side whoseSetkey method derives the poly1305 key from the AEAD key and nonce asdescribed in RFC 8439.Sponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D27837(cherry picked from commit dd2e1352b68aa33f7f6f8c19aaf88cf287013ae8) List of files: /freebsd-13.1/sys/modules/crypto/Makefile

ec3872a6 - Add an OCF algorithm for ChaCha20-Poly1305 AEAD.

Thu, 18 Feb 2021 17:21:56 +0000

Add an OCF algorithm for ChaCha20-Poly1305 AEAD.Note that this algorithm implements the mode defined in RFC 8439.Reviewed by: cemSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D27836(cherry picked from commit fc8fc743d89388c0c5b97a491428fab2b36beac8) List of files: /freebsd-13.1/sys/modules/crypto/Makefile

49d48f45 - modules/crypto: reenable assembly optimized skein implementation

Sat, 10 Oct 2020 01:13:14 +0000

modules/crypto: reenable assembly optimized skein implementationr366344 corrected the optimized amd64 skein assembly implementation, sowe can now enable it again.Also add a dependency on this Makefile for the skein_block object, sothat it will be rebuit (similar to r366362).PR: 248221Sponsored by: The FreeBSD Foundation List of files: /freebsd-13.1/sys/modules/crypto/Makefile

e32e8685 - modules/crypto: disable optimized assembly skein1024 implementation

Thu, 23 Jul 2020 19:19:33 +0000

modules/crypto: disable optimized assembly skein1024 implementationIt is presumably broken in the same way as userland skein1024 (see r363454)PR: 248221 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

24ed6f55 - Rename skein_block_asm.s to .S and assemble using Clang IAS

Sat, 06 Jun 2020 00:35:41 +0000

Rename skein_block_asm.s to .S and assemble using Clang IASComparing the object files produced by GNU as 2.17.50 and Clang IASshows many immaterial changes in strtab etc., and one material changein .text: 1bac: 4c 8b 4f 18 mov 0x18(%rdi),%r9 1bb0: eb 0e jmp 1bc0 - 1bb2: 66 66 2e 0f 1f 84 00 data16 nopw %cs:0x0(%rax,%rax,1)- 1bb9: 00 00 00 00- 1bbd: 0f 1f 00 nopl (%rax)+ 1bb2: 66 2e 0f 1f 84 00 00 nopw %cs:0x0(%rax,%rax,1)+ 1bb9: 00 00 00+ 1bbc: 0f 1f 40 00 nopl 0x0(%rax) 0000000000001bc0 : Skein1024_block_loop(): 1bc0: 4c 8b 47 10 mov 0x10(%rdi),%r8 1bc4: 4c 03 85 c0 00 00 00 add 0xc0(%rbp),%r8That is, GNU as and Clang's integrated assembler use different multi-byte NOPs for alignment (GNU as emits an 11 byte NOP + a 3 byte NOP,while Clang IAS emits a 10 byte NOP + a 4 byte NOP).Dependency cleanup hacks are not required, because we do not create.depend files from GNU as.Reviewed by: allanjude, arichardson, cem, tsoomeSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D8434 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

f2b86886 - Also pass SKEIN_USE_ASM to the assembler, via AFLAGS

Fri, 05 Jun 2020 18:56:43 +0000

Also pass SKEIN_USE_ASM to the assembler, via AFLAGS List of files: /freebsd-13.1/sys/modules/crypto/Makefile

310e81ae - Apply C SKEIN_LOOP setting only to skein_block.c

Fri, 05 Jun 2020 17:00:38 +0000

Apply C SKEIN_LOOP setting only to skein_block.cOtherwise if assembling skein_block_asm.s with Clang's integrated assemblerwe can pass conflicting SKEIN_LOOP settings (via CFLAGS and ACFLAGS). List of files: /freebsd-13.1/sys/modules/crypto/Makefile

8c27b7a9 - Add opt_compat.h needed by r359374.

Wed, 03 Jun 2020 23:21:44 +0000

Add opt_compat.h needed by r359374.Reported by: kevans List of files: /freebsd-13.1/sys/modules/crypto/Makefile

32075647 - Remove support for the Blowfish algorithm from OCF.

Mon, 11 May 2020 21:24:05 +0000

Remove support for the Blowfish algorithm from OCF.It no longer has any in-kernel consumers.Reviewed by: cemRelnotes: yesSponsored by: Chelsio CommunicationsDifferential Revision: https://reviews.freebsd.org/D24772 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

5e46d47f - Remove support for the skipjack encryption algorithm.

Mon, 11 May 2020 20:54:59 +0000

Remove support for the skipjack encryption algorithm.This was removed from IPsec in r286100 and no longer has any in-treeconsumers.Reviewed by: cemRelnotes: yesSponsored by: Chelsio CommunicationsDifferential Revision: https://reviews.freebsd.org/D24769 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

7971a6f9 - Remove support for the cast128 encryption algorithm.

Mon, 11 May 2020 20:52:18 +0000

Remove support for the cast128 encryption algorithm.It no longer has any in-tree consumers.Reviewed by: cemRelnotes: yesSponsored by: Chelsio CommunicationsDifferential Revision: https://reviews.freebsd.org/D24768 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

a15cb219 - Expose zlib's utility functions in Z_SOLO library when building kernel.

Wed, 07 Aug 2019 01:41:17 +0000

Expose zlib's utility functions in Z_SOLO library when building kernel.This allows kernel code to reuse zlib's implementation.PR: 229763Reviewed by: Yoshihiro Ota Relnotes: yesDifferential Revision: https://reviews.freebsd.org/D21156 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

0ed1d6fb - Allow Kernel to link in both legacy libkern/zlib and new sys/contrib/zlib,

Thu, 01 Aug 2019 06:35:33 +0000

Allow Kernel to link in both legacy libkern/zlib and new sys/contrib/zlib,with an eventual goal to convert all legacl zlib callers to the new zlibversion: * Move generic zlib shims that are not specific to zlib 1.0.4 to sys/dev/zlib. * Connect new zlib (1.2.11) to the zlib kernel module, currently built with Z_SOLO. * Prefix the legacy zlib (1.0.4) with 'zlib104_' namespace. * Convert sys/opencrypto/cryptodeflate.c to use new zlib. * Remove bundled zlib 1.2.3 from ZFS and adapt it to new zlib and make it depend on the zlib module. * Fix Z_SOLO build of new zlib.PR: 229763Submitted by: Yoshihiro Ota Reviewed by: markm (sys/dev/zlib/zlib_kmod.c)Relnotes: yesDifferential Revision: https://reviews.freebsd.org/D19706 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

a99bc4c3 - Add CBC-MAC authentication.

Fri, 15 Feb 2019 03:46:39 +0000

Add CBC-MAC authentication.This adds the CBC-MAC code to the kernel, but does not hook it up toanything (that comes in the next commit).https://tools.ietf.org/html/rfc3610 describes the algorithm.Note that this is a software-only implementation, which means it isfairly slow.Sponsored by: iXsystems IncDifferential Revision: https://reviews.freebsd.org/D18592 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

01d5de8f - Add xform-conforming auth_hash wrapper for Poly-1305

Fri, 17 Aug 2018 00:30:04 +0000

Add xform-conforming auth_hash wrapper for Poly-1305The wrapper is a thin shim around libsodium's Poly-1305 implementation. Fornow, we just use the C algorithm and do not attempt to build theSSE-optimized variant for x86 processors.The algorithm support has not yet been plumbed through cryptodev, or addedto cryptosoft. List of files: /freebsd-13.1/sys/modules/crypto/Makefile

cccc969b - Silence non-actionable warnings in vendor code

Sat, 19 May 2018 00:04:01 +0000

Silence non-actionable warnings in vendor codeWe can't modify vendor code so there's no signal in warnings from it.Similarly -Waddress-of-packed-member is not useful on networking codeas access to packed structures is fundamental to its operation. List of files: /freebsd-13.1/sys/modules/crypto/Makefile

3b8d52d3 - blake2: Disable warnings (not just error) for code we will not modify

Sat, 21 Apr 2018 02:08:56 +0000

blake2: Disable warnings (not just error) for code we will not modifyLeave libb2 pristine and silence the warnings for mjg. List of files: /freebsd-13.1/sys/modules/crypto/Makefile

61590291 - opencrypto: Integrate Chacha20 algorithm into OCF

Thu, 29 Mar 2018 04:02:50 +0000

opencrypto: Integrate Chacha20 algorithm into OCFMostly this is a thin shim around existing code to integrate with enc_xformand cryptosoft (+ cryptodev).Expand the cryptodev buffer used to match that of Chacha20's native blocksize as a performance enhancement for chacha20_xform_crypt_multi. List of files: /freebsd-13.1/sys/modules/crypto/Makefile

0e33efe4 - Import Blake2 algorithms (blake2b, blake2s) from libb2

Wed, 21 Mar 2018 16:18:14 +0000

Import Blake2 algorithms (blake2b, blake2s) from libb2The upstream repository is on github BLAKE2/libb2. Files landed insys/contrib/libb2 are the unmodified upstream files, except for onedifference: secure_zero_memory's contents have been replaced withexplicit_bzero() only because the previous implementation broke powerpclink. Preferential use of explicit_bzero() is in progress upstream, soit is anticipated we will be able to drop this diff in the future.sys/crypto/blake2 contains the source files needed to port libb2 to ourbuild system, a wrapped (limited) variant of the algorithm to match the APIof our auth_transform softcrypto abstraction, incorporation into the OpenCrypto Framework (OCF) cryptosoft(4) driver, as well as an x86 SSE/AVXaccelerated OCF driver, blake2(4).Optimized variants of blake2 are compiled for a number of x86 machines(anything from SSE2 to AVX + XOP). On those machines, FPU context will needto be explicitly saved before using blake2(4)-provided algorithms directly.Use via cryptodev / OCF saves FPU state automatically, and use via theauth_transform softcrypto abstraction does not use FPU.The intent of the OCF driver is mostly to enable testing in userspace via/dev/crypto. ATF tests are added with published KAT test vectors tovalidate correctness.Reviewed by: jhb, markjObtained from: github BLAKE2/libb2Differential Revision: https://reviews.freebsd.org/D14662 List of files: /freebsd-13.1/sys/modules/crypto/Makefile

929b476a - Increase loop unrolling for skein hashes

Sat, 01 Jul 2017 21:18:06 +0000

Increase loop unrolling for skein hashesThis patch was inspired by an opposite change made to shrink the codefor the boot loader.On my i7-4770, it increases the skein1024 speed from 470 to 550 MB/sReviewed by: sbrunoMFC after: 1 monthSponsored by: ScaleEngine Inc.Differential Revision: https://reviews.freebsd.org/D7824 List of files: /freebsd-13.1/sys/modules/crypto/Makefile