2a3ca2933d
Since the previous algorithm, based on bit shifting, does not scale with large replay windows, the algorithm used here is based on RFC 6479: IPsec Anti-Replay Algorithm without Bit Shifting. The replay window will be fast to be updated, but will cost as many bits in RAM as its size. The previous implementation did not provide a lock on the replay window, which may lead to replay issues. Reviewed by: ae Obtained from: emeric.poupon@stormshield.eu Sponsored by: Stormshield Differential Revision: https://reviews.freebsd.org/D8468 |
||
|---|---|---|
| .. | ||
| ipsec_dump_policy.c | ||
| ipsec_get_policylen.c | ||
| ipsec_set_policy.3 | ||
| ipsec_strerror.3 | ||
| ipsec_strerror.c | ||
| ipsec_strerror.h | ||
| libpfkey.h | ||
| Makefile | ||
| Makefile.depend | ||
| pfkey_dump.c | ||
| pfkey.c | ||
| policy_parse.y | ||
| policy_token.l | ||
| test-policy.c | ||