jmg 685318f335 these are comparing authenticators and need to be constant time... ...

This could be a side channel attack...  Now that we have a function
for this, use it...

jmgurney/ipsecgcm:	24d704cc and 7f37a14

2015-07-31 00:31:52 +00:00

..

ah_var.h

Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,

2013-07-09 10:08:13 +00:00

ah.h

…

esp_var.h

Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,

2013-07-09 10:08:13 +00:00

esp.h

Summary: Remove spurious, extra, next header comments.

2015-05-15 18:04:49 +00:00

ipcomp_var.h

Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat,

2013-07-09 10:08:13 +00:00

ipcomp.h

…

ipsec6.h

Remove now unused mtag argument from ipsec*_common_input_cb.

2014-12-11 17:14:49 +00:00

ipsec_input.c

IPSEC, remove variable argument function its already due.

2015-07-21 21:46:24 +00:00

ipsec_mbuf.c

Remove route chaching support from ipsec code. It isn't used for some time.

2014-12-02 04:20:50 +00:00

ipsec_output.c

Correct IPSec SA statistic keeping

2015-07-30 20:56:27 +00:00

ipsec.c

Reduce overhead of IPSEC for traffic generated from host

2015-07-03 15:31:56 +00:00

ipsec.h

IPSEC, remove variable argument function its already due.

2015-07-21 21:46:24 +00:00

key_debug.c

Rename ip4_def_policy variable to def_policy. It is used by both IPv4 and

2014-12-24 18:34:56 +00:00

key_debug.h

Remove __P() macro.

2014-12-03 04:08:41 +00:00

key_var.h

Remove more constants related to static sysctl nodes. The MAXID constants

2014-02-25 18:44:33 +00:00

key.c

Fill the port and protocol information in the SADB_ACQUIRE message

2015-07-06 12:40:31 +00:00

key.h

drop key_sa_stir_iv as it isn't used...

2015-06-11 13:05:37 +00:00

keydb.h

Remove __P() macro.

2014-12-03 04:08:41 +00:00

keysock.c

Remove unneded mbuf length adjustment, M_PREPEND() already did that.

2015-05-19 17:14:27 +00:00

keysock.h

Remove __P() macro.

2014-12-03 04:08:41 +00:00

xform_ah.c

these are comparing authenticators and need to be constant time...

2015-07-31 00:31:52 +00:00

xform_esp.c

these are comparing authenticators and need to be constant time...

2015-07-31 00:31:52 +00:00

xform_ipcomp.c

Fix possible use after free due to security policy deletion.

2015-04-27 00:55:56 +00:00

xform_tcp.c

Remove route chaching support from ipsec code. It isn't used for some time.

2014-12-02 04:20:50 +00:00

xform.h

RFC4868 section 2.3 requires that the output be half... This fixes

2015-07-29 07:15:16 +00:00