en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#685dc743 sys: Remove $FreeBSD$: one-line .c patternRemove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/ List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Wed, 16 Aug 2023 17:54:36 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#ab050b2b crypto: Remove unused devclass arguments to DRIVER_MODULE. List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Fri, 06 May 2022 22:46:58 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#50722514 cryptosoft: Avoid referencing end-of-buffer cursorsOnce a crypto cursor has reached the end of its buffer, it is invalid tocall crypto_cursor_segment() for at least some crypto buffer types.Reorganize loops to avoid this.Fixes: cfb7b942bed7 ("cryptosoft: Use multi-block encrypt/decrypt for non-AEAD ciphers.")Fixes: a221a8f4a0de ("cryptosoft: Use multi-block encrypt/decrypt for AES-GCM.")Fixes: f8580fcaa1e1 ("cryptosoft: Use multi-block encrypt/decrypt for AES-CCM.")Fixes: 5022c68732e6 ("cryptosoft: Use multi-block encrypt/decrypt for ChaCha20-Poly1305.")Reported and tested by: madpilotDiscussed with: jhbSponsored by: The FreeBSD Foundation List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 18 Jan 2022 00:01:24 +0000 Mark Johnston <markj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#5022c687 cryptosoft: Use multi-block encrypt/decrypt for ChaCha20-Poly1305.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33758 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 11 Jan 2022 22:21:31 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#f8580fca cryptosoft: Use multi-block encrypt/decrypt for AES-CCM.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33757 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 11 Jan 2022 22:21:00 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#a221a8f4 cryptosoft: Use multi-block encrypt/decrypt for AES-GCM.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33756 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 11 Jan 2022 22:20:32 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#69e533c3 swcr_encdec: Rename blks to blksz.This better reflects the variables purpose and matches other functionsin this file.Requested by: markjReviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33755 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 11 Jan 2022 22:20:10 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#cfb7b942 cryptosoft: Use multi-block encrypt/decrypt for non-AEAD ciphers.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33531 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 11 Jan 2022 22:18:57 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#8f35841f crypto: Add support for the XChaCha20-Poly1305 AEAD cipher.This cipher is a wrapper around the ChaCha20-Poly1305 AEAD cipherwhich accepts a larger nonce. Part of the nonce is used along withthe key as an input to HChaCha20 to generate a derived key used forChaCha20-Poly1305.This cipher is used by WireGuard.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33523 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Tue, 11 Jan 2022 22:16:05 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#c3a688ef OCF: Hook up plain RIPEMD160 in cryptosoft and /dev/crypto.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33612 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Thu, 30 Dec 2021 00:46:48 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#04781697 cryptosoft: Use POLY1305_BLOCK_LEN instead of a magic number.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33528 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Fri, 17 Dec 2021 21:58:59 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#7051c579 cryptosoft: Consolidate calls to explicit_bzero.Group sensitive on-stack variables into anonymous structs so that theycan be cleared with a single call to explicit_bzero rather thanmultiple calls.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33527 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Fri, 17 Dec 2021 21:58:58 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#1c9b25a5 cryptosoft: Reuse 'blk' to hold the initial nonce in swcr_gmac.Reusing the storage removes the need for an additional explicit_bzero.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33526 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Fri, 17 Dec 2021 21:58:58 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#49bb1307 cryptosoft: Remove unused 'iv' in swcr_ccm_cbc_mac.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33525 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Fri, 17 Dec 2021 21:58:58 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#2cd83828 cryptosoft: Remove CBC handling from swcr_encdec.All of the CBC ciphers now handle block chaining in the enc_xform.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33489 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Thu, 16 Dec 2021 21:48:15 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#aa268175 cryptosoft: Don't treat CRYPTO_NULL_HMAC as an hmac algorithm.Despite it's name, CRYPTO_NULL_HMAC is actually an unkeyed digestsimilar to plain SHA-1 rather than a keyed HMAC algorithm.Reported by: syzbot+17d7c656f1a797b0faae@syzkaller.appspotmail.comDiscussed with: markjFixes: 6113a08b98e4 cryptosoft: Fully support per-operation keys for auth algorithms.Sponsored by: The FreeBSD Foundation List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Wed, 15 Dec 2021 21:28:30 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#dc475c9b cryptosoft: Stop single-threading requests within a session.All of the request handlers no longer modify session state, so removethe mutex limiting operations to one per session. In addition, changethe pointer to the session state passed to process callbacks to const.Suggested by: mjgReviewed by: mjg, markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33317 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Thu, 09 Dec 2021 19:52:43 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#6113a08b cryptosoft: Fully support per-operation keys for auth algorithms.Only pre-allocate auth contexts when a session-wide key is provided orfor sessions without keys. For sessions with per-operation keys,always initialize the on-stack context directly rather thaninitializing the session context in swcr_authprepare (now removed) andthen copying that session context into the on-stack context.This approach permits parallel auth operations without needing aserializing lock. In addition, the previous code assumed that authsessions always provided an initial key unlike cipher sessions whichassume either an initial key or per-op keys.While here, fix the Blake2 auth transforms to function like other authtransforms where Setkey is invoked after Init rather than before.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33316 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Thu, 09 Dec 2021 19:52:42 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#b54d1284 cryptosoft: Allocate cipher contexts on the stack during operations.As is done with authentication contexts, allocate cipher contexts onthe stack while completing requests. This permits safely dispatchingconcurrent requests on a single session. The cipher context in thesession is now only allocated when a session key is provided duringsession setup to serve as a template to initialize the on-stackcontext similar to auth operations.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33198 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Thu, 09 Dec 2021 19:52:42 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/opencrypto/cryptosoft.c#f313909a cryptosoft: Rename sw_kschedule member to sw_ctx.The cipher context isn't always a key schedule, so use a more genericname.Reviewed by: markjSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D33197 List of files: /freebsd-14.2/sys/opencrypto/cryptosoft.c Thu, 09 Dec 2021 19:52:42 +0000 John Baldwin <jhb@FreeBSD.org>