John Baldwin e27a9ad8e6 Deprecate 3des support in IPsec for FreeBSD 13. ...

RFC 8221 does not outright ban 3des as the algorithms deprecated for
13 in r348205, but it is listed as a SHOULD NOT and will likely be a
MUST NOT by the time 13 ships.

Discussed with:	bjk
MFC after:	1 week
Sponsored by:	Chelsio Communications
Differential Revision:	https://reviews.freebsd.org/D24341

2020-04-22 19:44:33 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

…

ipcomp_var.h

…

ipcomp.h

…

ipsec6.h

…

ipsec_input.c

…

ipsec_mbuf.c

…

ipsec_mod.c

…

ipsec_output.c

…

ipsec_pcb.c

Remove unused argument to priv_check_cred.

2018-12-11 19:32:16 +00:00

ipsec_support.h

…

ipsec.c

Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)

2020-02-26 14:26:36 +00:00

ipsec.h

Make the warning intervals for deprecated crypto algorithms tunable.

2019-06-11 23:00:55 +00:00

key_debug.c

…

key_debug.h

…

key_var.h

…

key.c

Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)

2020-02-26 14:26:36 +00:00

key.h

Replace read_random(9) with more appropriate arc4rand(9) KPIs

2019-04-04 01:02:50 +00:00

keydb.h

…

keysock.c

Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)

2020-02-26 14:26:36 +00:00

keysock.h

…

subr_ipsec.c

…

udpencap.c

…

xform_ah.c

Refactor driver and consumer interfaces for OCF (in-kernel crypto).

2020-03-27 18:25:23 +00:00

xform_esp.c

Deprecate 3des support in IPsec for FreeBSD 13.

2020-04-22 19:44:33 +00:00

xform_ipcomp.c

Refactor driver and consumer interfaces for OCF (in-kernel crypto).

2020-03-27 18:25:23 +00:00

xform_tcp.c

…

xform.h

Refactor driver and consumer interfaces for OCF (in-kernel crypto).

2020-03-27 18:25:23 +00:00