John-Mark Gurney 817c7ed900 Clean up this header file... ...

use CTASSERTs now that we have them...

Replace a draft w/ RFC that's over 10 years old.

Note that _AALG and _EALG do not need to match what the IKE daemons
think they should be..  This is part of the KABI...  I decided to
renumber AESCTR, but since we've never had working AESCTR mode, I'm
not really breaking anything..  and it shortens a loop by quite
a bit..

remove SKIPJACK IPsec support...  SKIPJACK never made it out of draft
(in 1999), only has 80bit key, NIST recommended it stop being used
after 2010, and setkey nor any of the IKE daemons I checked supported
it...

jmgurney/ipsecgcm: a357a33, c75808b, e008669, b27b6d6

Reviewed by:	gnn (earlier version)

2015-07-31 00:23:21 +00:00

..

ah_var.h

Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,

2013-07-09 10:08:13 +00:00

ah.h

…

esp_var.h

Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,

2013-07-09 10:08:13 +00:00

esp.h

Summary: Remove spurious, extra, next header comments.

2015-05-15 18:04:49 +00:00

ipcomp_var.h

Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,

2013-07-09 10:08:13 +00:00

ipcomp.h

…

ipsec6.h

Remove now unused mtag argument from ipsec*_common_input_cb.

2014-12-11 17:14:49 +00:00

ipsec_input.c

IPSEC, remove variable argument function its already due.

2015-07-21 21:46:24 +00:00

ipsec_mbuf.c

Remove route chaching support from ipsec code. It isn't used for some time.

2014-12-02 04:20:50 +00:00

ipsec_output.c

Correct IPSec SA statistic keeping

2015-07-30 20:56:27 +00:00

ipsec.c

Reduce overhead of IPSEC for traffic generated from host

2015-07-03 15:31:56 +00:00

ipsec.h

IPSEC, remove variable argument function its already due.

2015-07-21 21:46:24 +00:00

key_debug.c

Rename ip4_def_policy variable to def_policy. It is used by both IPv4 and

2014-12-24 18:34:56 +00:00

key_debug.h

Remove __P() macro.

2014-12-03 04:08:41 +00:00

key_var.h

Remove more constants related to static sysctl nodes. The MAXID constants

2014-02-25 18:44:33 +00:00

key.c

Fill the port and protocol information in the SADB_ACQUIRE message

2015-07-06 12:40:31 +00:00

key.h

drop key_sa_stir_iv as it isn't used...

2015-06-11 13:05:37 +00:00

keydb.h

Remove __P() macro.

2014-12-03 04:08:41 +00:00

keysock.c

Remove unneded mbuf length adjustment, M_PREPEND() already did that.

2015-05-19 17:14:27 +00:00

keysock.h

Remove __P() macro.

2014-12-03 04:08:41 +00:00

xform_ah.c

RFC4868 section 2.3 requires that the output be half... This fixes

2015-07-29 07:15:16 +00:00

xform_esp.c

Clean up this header file...

2015-07-31 00:23:21 +00:00

xform_ipcomp.c

Fix possible use after free due to security policy deletion.

2015-04-27 00:55:56 +00:00

xform_tcp.c

Remove route chaching support from ipsec code. It isn't used for some time.

2014-12-02 04:20:50 +00:00

xform.h

RFC4868 section 2.3 requires that the output be half... This fixes

2015-07-29 07:15:16 +00:00