en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#0b9dffed ossl: Move arm_arch.h to a common subdirectoryOpenSSL itself keeps only a single copy of this header. Do the same insys/crypto/openssl to avoid the extra maintenance burden. This requiresadjusting the include paths for generated asm files.No functional change intended.Reported by: jrtc27Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D42866(cherry picked from commit e655cc70dfcda5cfedb5a1d9bef1e87d55519f64) List of files: /freebsd-14.2/sys/modules/ossl/Makefile Mon, 04 Dec 2023 17:29:11 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#3166bb7c ossl: Add AES-GCM support for NEON-enabled armv7This provides substantially higher throughput than the fallbackimplementation.Reviewed by: jhbMFC after: 3 monthsSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D41305(cherry picked from commit 629a72376d51aad812d6f1279403bc81c38c35d2) List of files: /freebsd-14.2/sys/modules/ossl/Makefile Thu, 30 Nov 2023 17:46:54 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#15e12749 ossl: Add support for armv7OpenSSL provides implementations of several AES modes which usebitslicing and can be accelerated on CPUs which support the NEONextension. This patch adds arm platform support to ossl(4) and providesan AES-CBC implementation, though bsaes_cbc_encrypt() only implementsdecryption. The real goal is to provide an accelerated AES-GCMimplementation; this will be added in a subsequent patch.Initially derived from https://reviews.freebsd.org/D37420.Reviewed by: jhbSponsored by: Klara, Inc.Sponsored by: StormshieldMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D41304(cherry picked from commit 44f8e1e8530e1d2e95e84bbbe3d22ac9cb2557fe) List of files: /freebsd-14.2/sys/modules/ossl/Makefile Thu, 30 Nov 2023 17:46:08 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#031beb4e sys: Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/sys/modules/ossl/Makefile Wed, 16 Aug 2023 17:54:58 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#9b1d8728 ossl: Add a fallback AES-GCM implementation using AES-NIThis lets one use ossl(4) for AES-GCM operations on contemporary amd64platforms. A kernel benchmark indicates that this gives roughlyequivalent throughput to aesni(4) for various buffer sizes.Bulk processing is done in aesni-gcm-x86_64.S, the rest is handled in aC wrapper ported from OpenSSL's gcm128.c.Sponsored by: StormshieldSponsored by: Klara, Inc.Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D39967 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Fri, 02 Jun 2023 16:01:41 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#9a3444d9 ossl: Add a VAES-based AES-GCM implementation for amd64aes-gcm-avx512.S is generated from OpenSSL 3.1 and implements AES-GCM.ossl_x86.c detects whether the CPU implements the required AVX512instructions; if not, the ossl(4) module does not provide an AES-GCMimplementation. The VAES implementation increases throughput for allbuffer sizes in both directions, up to 2x for sufficiently largebuffers.The "process" implementation is in two parts: a generic OCF layer inossl_aes.c that calls a set of MD functions to do the heavy lifting.The intent there is to make it possible to add other implementations forother platforms, e.g., to reduce the diff required for D37421.A follow-up commit will add a fallback path to legacy AES-NI, so thatossl(4) can be used in preference to aesni(4) on all amd64 platforms.In the long term we would like to replace aesni(4) and armv8crypto(4)with ossl(4).Note, currently this implementation will not be selected by defaultsince aesni(4) and ossl(4) return the same probe priority for cryptosessions, and the opencrypto framework selects the first registeredimplementation to break a tie. Since aesni(4) is compiled into thekernel, aesni(4) wins. A separate change may modify ossl(4) to havepriority.Sponsored by: StormshieldSponsored by: Klara, Inc.Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D39783 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Fri, 02 Jun 2023 15:58:29 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#197ff4c3 ossl: Add support for AES-CBC cipherAES-CBC OpenSSL assembly is used underneath.The glue layer(ossl_aes.c) is based on CHACHA20 implementation.Contrary to the SHA and CHACHA20, AES OpenSSL assembly logicdoes not have a fallback implementation in case CPU doesn'tsupport required instructions.Because of that CPU caps are checked during initialization and AESsupport is advertised only if available.The feature is available on all architectures that ossl supports:i386, amd64, arm64.The biggest advantage of this patch over existing solutions(aesni(4) and armv8crypto(4)) is that it supports SHA,allowing for ETA operations.Sponsored by: StormshieldObtained from: SemihalfReviewed by: jhb (previous version)Differential revision: https://reviews.freebsd.org/D32099 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Tue, 02 Nov 2021 11:53:22 +0000 Kornel Duleba <mindal@semihalf.com> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#200bc589 Revert "ossl: Add support for AES-CBC cipher"This reverts commit 849faf4e0ba9a8b8f24ff34da93a0fd46c14eda9. List of files: /freebsd-14.2/sys/modules/ossl/Makefile Sat, 06 Nov 2021 16:46:01 +0000 Wojciech Macek <wma@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#849faf4e ossl: Add support for AES-CBC cipherAES-CBC OpenSSL assembly is used underneath.The glue layer(ossl_aes.c) is based on CHACHA20 implementation.Contrary to the SHA and CHACHA20, AES OpenSSL assembly logicdoes not have a fallback implementation in case CPU doesn'tsupport required instructions.Because of that CPU caps are checked during initialization and AESsupport is advertised only if available.The feature is available on all architectures that ossl supports:i386, amd64, arm64.The biggest advantage of this patch over existing solutions(aesni(4) and armv8crypto(4)) is that it supports SHA,allowing for ETA operations.Sponsored by: StormshieldObtained from: SemihalfReviewed by: jhbDifferential revision: https://reviews.freebsd.org/D32099 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Tue, 02 Nov 2021 11:53:22 +0000 Kornel Duleba <mindal@semihalf.com> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#92aecd1e ossl: Add ChaCha20 cipher support.Sponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28756 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Wed, 03 Mar 2021 23:17:43 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#a079e38b ossl: Add Poly1305 digest support.Reviewed by: cemSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28754 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Wed, 03 Mar 2021 23:17:29 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#22bd0c97 ossl: port to arm64Enable in-kernel acceleration of SHA1 and SHA2 operations on arm64 by addingsupport for the ossl(4) crypto driver. This uses OpenSSL's assembly routinesunder the hood, which will detect and use SHA intrinsics if they aresupported by the CPU.Reviewed by: jhbSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D27390 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Fri, 04 Dec 2020 21:12:17 +0000 Mitchell Horne <mhorne@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#fd86ae68 ossl: split out x86 bits to x86/ossl_cpuid.cMake room for adding arm64 support to this driver by moving thex86-specific feature parsing to a separate file.Reviewed by: jhbSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D27388 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Fri, 04 Dec 2020 20:54:20 +0000 Mitchell Horne <mhorne@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/ossl/Makefile#ba610be9 Add a kernel crypto driver using assembly routines from OpenSSL.Currently, this supports SHA1 and SHA2-{224,256,384,512} both as plainhashes and in HMAC mode on both amd64 and i386. It uses the SHAintrinsics when present similar to aesni(4), but uses SSE/AVXinstructions when they are not.Note that some files from OpenSSL that normally wrap the assemblyroutines have been adapted to export methods usable by 'structauth_xform' as is used by existing software crypto routines.Reviewed by: gallatin, jkim, delphij, gnnSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D26821 List of files: /freebsd-14.2/sys/modules/ossl/Makefile Tue, 20 Oct 2020 17:50:18 +0000 John Baldwin <jhb@FreeBSD.org>