| Age | Commit message (Expand) | Author |
| 2022-05-25 | ipsec: don't assert for the format of incoming packets | ozaki-r |
| 2022-05-22 | opencrypto: crypto_dispatch never fails now. Make it return void. | riastradh |
| 2022-05-22 | opencrypto: Rip out EAGAIN logic when unregistering crypto drivers. | riastradh |
| 2022-05-22 | netipsec: Nothing uses xf_zeroize return value. Nix it. | riastradh |
| 2022-05-22 | opencrypto: Make crp_callback, krp_callback return void. | riastradh |
| 2020-10-05 | Make sequence number of esp header MP-safe for IPsec Tx side. reviewed by oza... | knakahara |
| 2020-06-30 | Rename enc_xform_rijndael128 -> enc_xform_aes. | riastradh |
| 2019-11-01 | Fix ipsecif(4) IPV6_MINMTU does not work correctly. | knakahara |
| 2019-06-12 | make DPRINTF use varyadic cpp macros, and merge with IPSECLOG. | christos |
| 2019-01-27 | Merge the [pgoyette-compat] branch | pgoyette |
| 2018-05-31 | Add a comment and a KASSERT. I remember wondering whether this check was a | maxv |
| 2018-05-31 | style | maxv |
| 2018-05-30 | Introduce ah_authsiz, which computes the length of the ICV only. Use it in | maxv |
| 2018-05-30 | Apply the previous change in esp_input too, same as esp_output. | maxv |
| 2018-05-30 | Remove dead code, 'espx' is never NULL and dereferenced earlier, so no need | maxv |
| 2018-05-30 | Simplify the padding computation. Until now 'padlen' contained the ESP | maxv |
| 2018-05-30 | Rename padding -> padlen, pad -> tail, and clarify. | maxv |
| 2018-05-18 | IP6_EXTHDR_GET -> M_REGION_GET, no functional change. | maxv |
| 2018-05-13 | Remove unused calls to nat_t_ports_get. | maxv |
| 2018-05-11 | ENOBUFS -> EACCES when updating the replay counter. | maxv |
| 2018-05-07 | Remove unused 'mp' argument from all the xf_output functions. Also clean | maxv |
| 2018-05-01 | When IP6_EXTHDR_GET fails, return ENOBUFS, and don't log an error (HDROPS | maxv |
| 2018-05-01 | When the replay check fails, return EACCES instead of ENOBUFS. | maxv |
| 2018-05-01 | Remove double include, opencrypto/xform.h is already included in | maxv |
| 2018-04-28 | Remove IPSEC_SPLASSERT_SOFTNET, it has always been a no-op. | maxv |
| 2018-04-19 | Remove extra long file paths from the headers. | maxv |
| 2018-04-19 | Style, and remove meaningless XXX. | maxv |
| 2018-02-16 | Add [ah/esp/ipcomp]_enable sysctls, and remove the FreeBSD #ifdefs. | maxv |
| 2018-02-16 | Remove some more FreeBSD sysctl declarations that already have NetBSD | maxv |
| 2018-02-15 | Style a bit, and if we don't know the pad-filling policy use | maxv |
| 2018-02-15 | Don't relook up an SP/SA in opencrpyto callbacks | ozaki-r |
| 2018-02-14 | Dedup common codes in error paths (NFCI) | ozaki-r |
| 2018-02-14 | Fix mbuf leaks on error paths | ozaki-r |
| 2018-01-24 | Add missing NULL check. Normally that's not triggerable remotely, since we | maxv |
| 2017-10-03 | Constify isr at many places (NFC) | ozaki-r |
| 2017-08-10 | Use pool_cache(9) instead of pool(9) for tdb_crypto objects | ozaki-r |
| 2017-08-09 | MP-ify SAD (savlist) | ozaki-r |
| 2017-08-03 | Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never b... | ozaki-r |
| 2017-08-02 | Make IPsec SPD MP-safe | ozaki-r |
| 2017-07-27 | Don't acquire global locks for IPsec if NET_MPSAFE | ozaki-r |
| 2017-07-20 | Use pool to allocate tdb_crypto | ozaki-r |
| 2017-07-19 | Hold a reference to an SP during opencrypto processing | ozaki-r |
| 2017-07-19 | Don't bother the case of crp->crp_buf == NULL in callbacks | ozaki-r |
| 2017-07-19 | Don't release sav if calling crypto_dispatch again | ozaki-r |
| 2017-07-14 | Prepare to stop using isr->sav | ozaki-r |
| 2017-07-14 | Pass sav directly to opencrypto callback | ozaki-r |
| 2017-07-13 | Fix header size calculation of esp where sav is NULL | ozaki-r |
| 2017-07-10 | Use explicit_memset to surely zero-clear key_auth and key_enc | ozaki-r |
| 2017-07-07 | Rename key_alloc* functions (NFC) | ozaki-r |
| 2017-07-05 | Remove codes for PACKET_TAG_IPSEC_IN_CRYPTO_DONE | ozaki-r |