John-Mark Gurney 42e5fcbf2b these are comparing authenticators and need to be constant time... ... This could be a side channel attack... Now that we have a function for this, use it... jmgurney/ipsecgcm: 24d704cc and 7f37a14		2015-07-31 00:31:52 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h	Summary: Remove spurious, extra, next header comments.	2015-05-15 18:04:49 +00:00
ipcomp_var.h
ipcomp.h
ipsec6.h
ipsec_input.c	IPSEC, remove variable argument function its already due.	2015-07-21 21:46:24 +00:00
ipsec_mbuf.c
ipsec_output.c	Correct IPSec SA statistic keeping	2015-07-30 20:56:27 +00:00
ipsec.c	Reduce overhead of IPSEC for traffic generated from host	2015-07-03 15:31:56 +00:00
ipsec.h	IPSEC, remove variable argument function its already due.	2015-07-21 21:46:24 +00:00
key_debug.c
key_debug.h
key_var.h
key.c	Fill the port and protocol information in the SADB_ACQUIRE message	2015-07-06 12:40:31 +00:00
key.h	drop key_sa_stir_iv as it isn't used...	2015-06-11 13:05:37 +00:00
keydb.h
keysock.c	Remove unneded mbuf length adjustment, M_PREPEND() already did that.	2015-05-19 17:14:27 +00:00
keysock.h
xform_ah.c	these are comparing authenticators and need to be constant time...	2015-07-31 00:31:52 +00:00
xform_esp.c	these are comparing authenticators and need to be constant time...	2015-07-31 00:31:52 +00:00
xform_ipcomp.c	Fix possible use after free due to security policy deletion.	2015-04-27 00:55:56 +00:00
xform_tcp.c
xform.h	RFC4868 section 2.3 requires that the output be half... This fixes	2015-07-29 07:15:16 +00:00