d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
08fca7a56b
freebsd-dev/etc
History
John-Mark Gurney 08fca7a56b Add some new modes to OpenCrypto. These modes are AES-ICM (can be used 
for counter mode), and AES-GCM.  Both of these modes have been added to
the aesni module.

Included is a set of tests to validate that the software and aesni
module calculate the correct values.  These use the NIST KAT test
vectors.  To run the test, you will need to install a soon to be
committed port, nist-kat that will install the vectors.  Using a port
is necessary as the test vectors are around 25MB.

All the man pages were updated.  I have added a new man page, crypto.7,
which includes a description of how to use each mode.  All the new modes
and some other AES modes are present.  It would be good for someone
else to go through and document the other modes.

A new ioctl was added to support AEAD modes which AES-GCM is one of them.
Without this ioctl, it is not possible to test AEAD modes from userland.

Add a timing safe bcmp for use to compare MACs.  Previously we were using
bcmp which could leak timing info and result in the ability to forge
messages.

Add a minor optimization to the aesni module so that single segment
mbufs don't get copied and instead are updated in place.  The aesni
module needs to be updated to support blocked IO so segmented mbufs
don't have to be copied.

We require that the IV be specified for all calls for both GCM and ICM.
This is to ensure proper use of these functions.

Obtained from:	p4: //depot/projects/opencrypto
Relnotes:	yes
Sponsored by:	FreeBSD Foundation
Sponsored by:	NetGate
2014-12-12 19:56:36 +00:00
..
autofs Add "-media" autofs map, to access data on removable media, such as CD 2014-12-10 14:36:44 +00:00
bluetooth
casper Please welcome casperd daemon. It (and its services) will be responsible for 2013-12-02 08:21:28 +00:00
defaults Remove etc/rc.d/mrouted 2014-11-30 06:03:59 +00:00
devd Missed a terminating ';'. 2014-11-18 16:31:00 +00:00
dma Install a default configuration file for dma 2014-02-21 21:02:19 +00:00
etc.amd64 Convert the potential console port over to using 3wire, for i386/amd64. 2014-06-17 18:51:03 +00:00
etc.arm Change the terminal type/class for enabled serial lines to 3wire. This 2014-03-09 21:06:22 +00:00
etc.i386 Convert the potential console port over to using 3wire, for i386/amd64. 2014-06-17 18:51:03 +00:00
etc.mips Change the terminal type/class for enabled serial lines to 3wire. This 2014-03-09 21:06:22 +00:00
etc.pc98 Remove the reference to pseudo-terminals from the description. 2011-03-30 08:22:29 +00:00
etc.powerpc Change the terminal type/class for enabled serial lines to 3wire. This 2014-03-09 21:06:22 +00:00
etc.sparc64 Change the terminal type/class for enabled serial lines to 3wire. This 2014-03-09 21:06:22 +00:00
gss
mail Fix incremental builds involving non-root users with read-only source files. 2014-09-18 14:41:57 +00:00
mtree Add some new modes to OpenCrypto. These modes are AES-ICM (can be used 2014-12-12 19:56:36 +00:00
pam.d Honor MK_AT, MK_FTP, MK_MAIL, and MK_OPENSSH 2014-11-30 00:51:00 +00:00
periodic Avoid installing security.functions with executable bits, periodic(8) will 2014-11-05 06:42:07 +00:00
pkg Give hint on how to disable the default repository. 2014-03-30 15:24:17 +00:00
ppp
rc.d Remove duplicate FILESYSTEMS REQUIRE from etc/rc.d/ipmon and etc/rc.d/pflog 2014-11-30 12:34:48 +00:00
root Remove the conditional 2014-11-28 22:08:50 +00:00
sendmail Minor changes to force commit these files so new freebsd*.cf files are 2014-05-22 04:43:40 +00:00
tests Add placeholder Kyuafiles for various top-level hierarchies. 2014-04-21 21:39:25 +00:00
amd.map
apmd.conf
auto_master Add "-media" autofs map, to access data on removable media, such as CD 2014-12-10 14:36:44 +00:00
crontab
csh.cshrc
csh.login
csh.logout
ddb.conf
devd.conf Add "-media" autofs map, to access data on removable media, such as CD 2014-12-10 14:36:44 +00:00
devfs.conf Remove example for linking /dev/vga to /dev/ttyv0, this hasn't been 2011-10-27 20:39:20 +00:00
dhclient.conf
disktab 10 years too late add support for "2.88MB 3.5in Extra High Density" 2012-11-02 00:17:30 +00:00
fbtab
freebsd-update.conf Remove remnants of BIND from /etc, since there is no BIND in base now. 2013-11-05 09:30:06 +00:00
ftpusers Remove most of the ATF tools and the _atf user. 2013-10-12 06:06:53 +00:00
gettytab Add 3wire and std as terminal types/classes. These are similar to 2014-03-09 20:51:14 +00:00
group Remove most of the ATF tools and the _atf user. 2013-10-12 06:06:53 +00:00
hosts
hosts.allow Disable libwrap (TCP wrappers) support in rpcbind by default, introducing 2014-03-06 17:33:27 +00:00
hosts.equiv
hosts.lpd
inetd.conf Remove CVS from the base system. 2013-06-15 20:29:07 +00:00
libalias.conf
libmap32.conf Remove unneeded mappings from libmap32.conf. Move it up one level and 2013-09-09 06:02:30 +00:00
libmap.conf Include /usr/local/etc/libmap.d/ by default. 2013-08-01 05:50:42 +00:00
login.access
login.conf Add a resource limit for the total number of kqueues available to the 2013-10-21 16:46:12 +00:00
mac.conf Spelling fixes for etc/ 2012-01-07 16:10:32 +00:00
Makefile Honor MK_AUDIT with respect to etc/security 2014-11-30 01:42:55 +00:00
man.alias
master.passwd Remove most of the ATF tools and the _atf user. 2013-10-12 06:06:53 +00:00
minfree
motd Add the less-ambiguous freebsd-version command. 2014-11-02 19:25:31 +00:00
netconfig
netstart Start rtsold if necessary. 2013-10-22 06:53:01 +00:00
network.subr Renove faith(4) and faithd(8) from base. It looks like industry 2014-11-09 21:33:01 +00:00
networks
newsyslog.conf - Include /etc/newsyslog.conf.d/* and /usr/local/etc/newsyslog.conf.d/* by 2014-05-20 03:00:20 +00:00
nls.alias
nscd.conf
nsmb.conf Remove IPX support. 2014-03-14 02:58:48 +00:00
nsswitch.conf Revert r224760, and enhance the sed patterns from r224659 to comment out 2011-08-10 20:52:02 +00:00
ntp.conf Tighten default restrictions for ntpd(8) server and provide a link 2013-12-27 23:06:15 +00:00
opieaccess
pccard_ether Not only load pccard_ether settings, also load network settings. This 2012-11-08 20:34:12 +00:00
pf.os Add DragonFly BSD fingerprints to pf.os 2013-12-03 04:32:02 +00:00
phones
portsnap.conf Now that the portsnap buildbox is generating the raw bits for INDEX-10, 2013-09-26 10:33:15 +00:00
printcap
profile
protocols Bring /etc/protocols up to date. 2013-05-10 13:57:44 +00:00
rc The early-late divider was originally set to mountcritlocal. Since that 2014-12-01 12:29:59 +00:00
rc.bsdextended
rc.firewall Fix a typo. 2014-10-20 04:14:35 +00:00
rc.initdiskless Revert r243228. This commit appears to cause more trouble than 2012-11-21 18:12:28 +00:00
rc.resume wpa_supplicant should be able to reassociate when resuming, so remove a 2013-07-04 07:32:40 +00:00
rc.sendmail
rc.shutdown Refine the "nojail" rc keyword, adding "nojailvnet" for files that don't 2013-05-19 04:10:34 +00:00
rc.subr Allow load_rc_config to be called without a service name. 2014-12-01 12:17:42 +00:00
rc.suspend Revert r211288 and move the logic to the acpi_timer itself. 2012-02-08 20:31:42 +00:00
regdomain.xml Add a new 900MHz GSM regulatory SKU for the Xagyl Communications XC900M. 2012-12-07 06:34:46 +00:00
remote
rpc
services Add Veritas NetBackup 2013-12-03 04:03:19 +00:00
shells
snmpd.config Adds the bsnmp module to export the temperature data from lm75 sensors on 2014-06-01 03:14:03 +00:00
sysctl.conf
syslog.conf sbin/devd/devd.cc 2013-12-13 22:58:57 +00:00
termcap.small Fix termcap entry typo. 2011-02-09 10:06:31 +00:00