summaryrefslogtreecommitdiff
path: root/sys/netipsec/xform_esp.c
AgeCommit message (Expand)Author
2022-05-25ipsec: don't assert for the format of incoming packetsozaki-r
2022-05-22opencrypto: crypto_dispatch never fails now. Make it return void.riastradh
2022-05-22opencrypto: Rip out EAGAIN logic when unregistering crypto drivers.riastradh
2022-05-22netipsec: Nothing uses xf_zeroize return value. Nix it.riastradh
2022-05-22opencrypto: Make crp_callback, krp_callback return void.riastradh
2020-10-05Make sequence number of esp header MP-safe for IPsec Tx side. reviewed by oza...knakahara
2020-06-30Rename enc_xform_rijndael128 -> enc_xform_aes.riastradh
2019-11-01Fix ipsecif(4) IPV6_MINMTU does not work correctly.knakahara
2019-06-12make DPRINTF use varyadic cpp macros, and merge with IPSECLOG.christos
2019-01-27Merge the [pgoyette-compat] branchpgoyette
2018-05-31Add a comment and a KASSERT. I remember wondering whether this check was amaxv
2018-05-31stylemaxv
2018-05-30Introduce ah_authsiz, which computes the length of the ICV only. Use it inmaxv
2018-05-30Apply the previous change in esp_input too, same as esp_output.maxv
2018-05-30Remove dead code, 'espx' is never NULL and dereferenced earlier, so no needmaxv
2018-05-30Simplify the padding computation. Until now 'padlen' contained the ESPmaxv
2018-05-30Rename padding -> padlen, pad -> tail, and clarify.maxv
2018-05-18IP6_EXTHDR_GET -> M_REGION_GET, no functional change.maxv
2018-05-13Remove unused calls to nat_t_ports_get.maxv
2018-05-11ENOBUFS -> EACCES when updating the replay counter.maxv
2018-05-07Remove unused 'mp' argument from all the xf_output functions. Also cleanmaxv
2018-05-01When IP6_EXTHDR_GET fails, return ENOBUFS, and don't log an error (HDROPSmaxv
2018-05-01When the replay check fails, return EACCES instead of ENOBUFS.maxv
2018-05-01Remove double include, opencrypto/xform.h is already included inmaxv
2018-04-28Remove IPSEC_SPLASSERT_SOFTNET, it has always been a no-op.maxv
2018-04-19Remove extra long file paths from the headers.maxv
2018-04-19Style, and remove meaningless XXX.maxv
2018-02-16Add [ah/esp/ipcomp]_enable sysctls, and remove the FreeBSD #ifdefs.maxv
2018-02-16Remove some more FreeBSD sysctl declarations that already have NetBSDmaxv
2018-02-15Style a bit, and if we don't know the pad-filling policy usemaxv
2018-02-15Don't relook up an SP/SA in opencrpyto callbacksozaki-r
2018-02-14Dedup common codes in error paths (NFCI)ozaki-r
2018-02-14Fix mbuf leaks on error pathsozaki-r
2018-01-24Add missing NULL check. Normally that's not triggerable remotely, since wemaxv
2017-10-03Constify isr at many places (NFC)ozaki-r
2017-08-10Use pool_cache(9) instead of pool(9) for tdb_crypto objectsozaki-r
2017-08-09MP-ify SAD (savlist)ozaki-r
2017-08-03Introduce KEY_SA_UNREF and replace KEY_FREESAV with it where sav will never b...ozaki-r
2017-08-02Make IPsec SPD MP-safeozaki-r
2017-07-27Don't acquire global locks for IPsec if NET_MPSAFEozaki-r
2017-07-20Use pool to allocate tdb_cryptoozaki-r
2017-07-19Hold a reference to an SP during opencrypto processingozaki-r
2017-07-19Don't bother the case of crp->crp_buf == NULL in callbacksozaki-r
2017-07-19Don't release sav if calling crypto_dispatch againozaki-r
2017-07-14Prepare to stop using isr->savozaki-r
2017-07-14Pass sav directly to opencrypto callbackozaki-r
2017-07-13Fix header size calculation of esp where sav is NULLozaki-r
2017-07-10Use explicit_memset to surely zero-clear key_auth and key_encozaki-r
2017-07-07Rename key_alloc* functions (NFC)ozaki-r
2017-07-05Remove codes for PACKET_TAG_IPSEC_IN_CRYPTO_DONEozaki-r