Page MenuHomeFreeBSD

Add boot crypto framework
AbandonedPublic

Authored by eric_metricspace.net on Oct 17 2017, 12:47 AM.
Tags
None
Referenced Files
F161107446: D12692.diff
Tue, Jun 30, 2:58 PM
F161105689: D12692.id40871.diff
Tue, Jun 30, 2:37 PM
F161085914: D12692.id.diff
Tue, Jun 30, 10:47 AM
F161048085: D12692.id41725.diff
Tue, Jun 30, 3:13 AM
Unknown Object (File)
Mon, Jun 29, 11:40 AM
Unknown Object (File)
Sun, Jun 28, 2:15 AM
Unknown Object (File)
Wed, Jun 24, 7:35 AM
Unknown Object (File)
Mon, Jun 22, 9:04 PM

Details

Summary

This adds a crypto framework for boot-time code without the size restrictions to which BIOS code is subject. The framework is designed to allow new ciphers to be added relatively easily.

Note: it is probable that this code will be replaced in the mid-term future. There is talk of a crypto overhaul, but this will not take place in any timeline suitable for GELI integration.

Test Plan

This has already been tested for both AES-CBC and AES-XTS in testing of the GELI boot code. Its present form is unmodified from the last successful test.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped