John-Mark Gurney 08fca7a56b Add some new modes to OpenCrypto. These modes are AES-ICM (can be used ... for counter mode), and AES-GCM. Both of these modes have been added to the aesni module. Included is a set of tests to validate that the software and aesni module calculate the correct values. These use the NIST KAT test vectors. To run the test, you will need to install a soon to be committed port, nist-kat that will install the vectors. Using a port is necessary as the test vectors are around 25MB. All the man pages were updated. I have added a new man page, crypto.7, which includes a description of how to use each mode. All the new modes and some other AES modes are present. It would be good for someone else to go through and document the other modes. A new ioctl was added to support AEAD modes which AES-GCM is one of them. Without this ioctl, it is not possible to test AEAD modes from userland. Add a timing safe bcmp for use to compare MACs. Previously we were using bcmp which could leak timing info and result in the ability to forge messages. Add a minor optimization to the aesni module so that single segment mbufs don't get copied and instead are updated in place. The aesni module needs to be updated to support blocked IO so segmented mbufs don't have to be copied. We require that the IV be specified for all calls for both GCM and ICM. This is to ensure proper use of these functions. Obtained from: p4: //depot/projects/opencrypto Relnotes: yes Sponsored by: FreeBSD Foundation Sponsored by: NetGate		2014-12-12 19:56:36 +00:00
..
files	Add some new modes to OpenCrypto. These modes are AES-ICM (can be used	2014-12-12 19:56:36 +00:00
files.amd64	Add some new modes to OpenCrypto. These modes are AES-ICM (can be used	2014-12-12 19:56:36 +00:00
files.arm	Add ARMV6 as an arm option. This will cause obscure magic in config(8)	2014-11-24 00:02:15 +00:00
files.i386	Add some new modes to OpenCrypto. These modes are AES-ICM (can be used	2014-12-12 19:56:36 +00:00
files.mips
files.pc98
files.powerpc
files.sparc64
kern.mk	Ignore more warnings with external gcc	2014-11-29 14:30:39 +00:00
kern.opts.mk	Automate options INET/INET6 turning into MK_$opt_SUPPORT	2014-11-14 21:10:45 +00:00
kern.post.mk
kern.pre.mk
kmod_syms.awk
kmod.mk	Retire the '@' symlink. It isn't really needed and causes more	2014-11-06 16:48:37 +00:00
ldscript.amd64
ldscript.arm
ldscript.i386
ldscript.mips
ldscript.mips.cfe
ldscript.mips.mips64
ldscript.mips.octeon1
ldscript.powerpc
ldscript.powerpc64
ldscript.sparc64
Makefile.amd64
Makefile.arm	Only build the ARM tranpoline when KERNPHYSADDR is defined as it is	2014-10-19 20:56:05 +00:00
Makefile.i386
Makefile.mips
Makefile.pc98
Makefile.powerpc
Makefile.sparc64
makeLINT.mk
makeLINT.sed
newvers.sh	Use ${SYSDIR} as the reference pointer instead of specifying relative path directly.	2014-11-14 18:44:13 +00:00
NOTES	Renove faith(4) and faithd(8) from base. It looks like industry	2014-11-09 21:33:01 +00:00
options	This is the much-discussed major upgrade to the random(4) device, known to you all as /dev/random.	2014-10-30 21:21:53 +00:00
options.amd64
options.arm	Add ARMV6 as an arm option. This will cause obscure magic in config(8)	2014-11-24 00:02:15 +00:00
options.i386
options.mips
options.pc98
options.powerpc
options.sparc64
systags.sh
WITHOUT_SOURCELESS
WITHOUT_SOURCELESS_HOST
WITHOUT_SOURCELESS_UCODE