freebsd-dev/sys
Marcin Wojtas 8b7f39947c Implement anti-replay algorithm with ESN support
As RFC 4304 describes there is anti-replay algorithm responsibility
to provide appropriate value of Extended Sequence Number.

This patch introduces anti-replay algorithm with ESN support based on
RFC 4304, however to avoid performance regressions window implementation
was based on RFC 6479, which was already implemented in FreeBSD.

To keep things clean and improve code readability, implementation of window
is kept in seperate functions.

Submitted by:           Grzegorz Jaszczyk <jaz@semihalf.com>
                        Patryk Duda <pdk@semihalf.com>
Reviewed by:            jhb
Differential revision:  https://reviews.freebsd.org/D22367
Obtained from:          Semihalf
Sponsored by:           Stormshield
2020-10-16 11:24:12 +00:00
..
amd64 Simplify preload_dump() condition 2020-10-15 20:21:15 +00:00
arm Simplify preload_dump() condition 2020-10-15 20:21:15 +00:00
arm64 Simplify preload_dump() condition 2020-10-15 20:21:15 +00:00
bsm bsm: add AUE_CLOSERANGE 2020-04-24 01:27:25 +00:00
cam Fix sbuf_finish() error code check in user-space. 2020-10-13 23:29:06 +00:00
cddl Turn off zstd on aarch64 2020-10-13 02:36:16 +00:00
compat Set default stack size for Linux apps to 8MB. This matches Linux' 2020-10-16 11:23:30 +00:00
conf move vmware pv drivers to sys/conf/files 2020-10-15 14:37:51 +00:00
contrib zfs: g/c unused vop_vector zfsctl_ops_shares_dir 2020-10-15 05:04:57 +00:00
crypto Add support for ESN in AES-NI crypto driver 2020-10-16 11:21:56 +00:00
ddb ddb: clean up empty lines in .c and .h files 2020-09-01 22:14:30 +00:00
dev Drop unsolicited responses to the still attaching CODECs. 2020-10-15 17:40:02 +00:00
dts Brand our DTS with the Linux version it was imported from 2020-10-10 07:18:51 +00:00
fs Bump pseudofs size limit from 128kB to 1MB. The old limit could result 2020-10-16 09:58:10 +00:00
gdb gdb(4): Don't escape GDB special characters at application layer 2020-09-30 14:55:54 +00:00
geom Move kernel env global variables, etc to sys/kenv.h 2020-10-07 06:16:37 +00:00
gnu Brand our DTS with the Linux version it was imported from 2020-10-10 07:18:51 +00:00
i386 Fix for mis-interpretation of PCB_KERNFPU. 2020-10-14 23:01:41 +00:00
isa
kern cache: flip inverted condition in previous 2020-10-16 02:19:33 +00:00
kgssapi State kgssapi dependency on xdr. 2020-09-17 22:29:38 +00:00
libkern arc4random(9): Integrate with RANDOM_FENESTRASX push-reseed 2020-10-10 21:48:06 +00:00
mips Avoid dump_avail[] redefinition. 2020-10-14 22:51:40 +00:00
modules Don't build the malo module with clang 10 2020-10-14 12:28:48 +00:00
net Add SADB_SAFLAGS_ESN flag 2020-10-16 11:22:29 +00:00
net80211 net80211: whitespace 2020-10-07 22:52:24 +00:00
netgraph ng_l2tp: Fix callout synchronization in the rexmit timeout handler 2020-09-25 18:55:50 +00:00
netinet Improve the handling of cookie life times. 2020-10-16 10:44:48 +00:00
netinet6 Add IP(V6)_VLAN_PCP to set 802.1 priority per-flow. 2020-10-09 12:06:43 +00:00
netipsec Implement anti-replay algorithm with ESN support 2020-10-16 11:24:12 +00:00
netpfil Add IPv4 fragments reassembling to NAT64LSN. 2020-10-13 18:57:42 +00:00
netsmb net: clean up empty lines in .c and .h files 2020-09-01 21:19:14 +00:00
nfs nfs: clean up empty lines in .c and .h files 2020-09-01 21:25:39 +00:00
nfsclient nfs: clean up empty lines in .c and .h files 2020-09-01 21:25:39 +00:00
nfsserver nfs: clean up empty lines in .c and .h files 2020-09-01 21:25:39 +00:00
nlm nlm: clean up empty lines in .c and .h files 2020-09-01 22:14:52 +00:00
ofed Allow IP over IB to work with multiple FIBs. 2020-10-13 20:41:51 +00:00
opencrypto Add support for ESN in cryptosoft 2020-10-16 11:18:13 +00:00
powerpc Avoid dump_avail[] redefinition. 2020-10-14 22:51:40 +00:00
riscv Simplify preload_dump() condition 2020-10-15 20:21:15 +00:00
rpc Fix a potential memory leak in the NFS over TLS handling code. 2020-09-05 00:50:52 +00:00
security mac_framework.h: fix build with DEBUG_VFS_LOCKS and !MAC 2020-09-03 20:30:52 +00:00
sys Bump __FreeBSD_version after addition of VOP_EAGAIN 2020-10-15 05:11:16 +00:00
teken Do a sweep and remove most WARNS=6 settings 2020-10-01 01:10:51 +00:00
tests Add small tool to invoke kernel test framework tests. 2020-09-02 09:20:40 +00:00
tools Brand our DTS with the Linux version it was imported from 2020-10-10 07:18:51 +00:00
ufs Do not leak B_BARRIER. 2020-10-08 22:41:02 +00:00
vm Avoid dump_avail[] redefinition. 2020-10-14 22:51:40 +00:00
x86 Limit workaround for errata E400 to appropriate AMD cpus. 2020-10-14 22:57:50 +00:00
xdr xdr: clean up empty lines in .c and .h files 2020-09-01 22:13:28 +00:00
xen xen: clean up empty lines in .c and .h files 2020-09-01 21:21:55 +00:00
Makefile