John-Mark Gurney 42e5fcbf2b these are comparing authenticators and need to be constant time... ...

This could be a side channel attack...  Now that we have a function
for this, use it...

jmgurney/ipsecgcm:	24d704cc and 7f37a14

2015-07-31 00:31:52 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

Summary: Remove spurious, extra, next header comments.

2015-05-15 18:04:49 +00:00

ipcomp_var.h

…

ipcomp.h

…

ipsec6.h

…

ipsec_input.c

IPSEC, remove variable argument function its already due.

2015-07-21 21:46:24 +00:00

ipsec_mbuf.c

…

ipsec_output.c

Correct IPSec SA statistic keeping

2015-07-30 20:56:27 +00:00

ipsec.c

Reduce overhead of IPSEC for traffic generated from host

2015-07-03 15:31:56 +00:00

ipsec.h

IPSEC, remove variable argument function its already due.

2015-07-21 21:46:24 +00:00

key_debug.c

…

key_debug.h

…

key_var.h

…

key.c

Fill the port and protocol information in the SADB_ACQUIRE message

2015-07-06 12:40:31 +00:00

key.h

drop key_sa_stir_iv as it isn't used...

2015-06-11 13:05:37 +00:00

keydb.h

…

keysock.c

Remove unneded mbuf length adjustment, M_PREPEND() already did that.

2015-05-19 17:14:27 +00:00

keysock.h

…

xform_ah.c

these are comparing authenticators and need to be constant time...

2015-07-31 00:31:52 +00:00

xform_esp.c

these are comparing authenticators and need to be constant time...

2015-07-31 00:31:52 +00:00

xform_ipcomp.c

Fix possible use after free due to security policy deletion.

2015-04-27 00:55:56 +00:00

xform_tcp.c

…

xform.h

RFC4868 section 2.3 requires that the output be half... This fixes

2015-07-29 07:15:16 +00:00