Page MenuHomeFreeBSD

Add a new COP_F_CIPHER_FIRST flag for struct crypt_op.
ClosedPublic

Authored by jhb on Jul 27 2017, 9:34 PM.
Tags
None
Referenced Files
F171917205: D11757.id31275.diff
Mon, Sep 14, 1:59 PM
F171917188: D11757.id33294.diff
Mon, Sep 14, 1:59 PM
F171916852: D11757.diff
Mon, Sep 14, 1:56 PM
Unknown Object (File)
Fri, Aug 21, 3:37 PM
Unknown Object (File)
Fri, Aug 21, 3:11 PM
Unknown Object (File)
Thu, Aug 20, 8:21 PM
Unknown Object (File)
Thu, Aug 20, 5:03 PM
Unknown Object (File)
Wed, Aug 19, 5:05 PM

Details

Summary

Add a new COP_F_CIPHER_FIRST flag for struct crypt_op.

This requests that the cipher be performed before rather than after
the HMAC when both are specified for a single operation.

Test Plan
  • testing IPSec-like encrypt-then-authenticate operations from userland via the cryptocheck tool on ccr0 and cryptosoft
  • encryption operations need this flag for EtA while decryption operations do not

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable