Page MenuHomeFreeBSD

KTLS intel isa-l : Rework TLS 1.3 support
ClosedPublic

Authored by gallatin on Oct 1 2019, 5:51 PM.
Tags
None
Referenced Files
Unknown Object (File)
Feb 19 2024, 6:18 PM
Unknown Object (File)
Dec 20 2023, 8:12 AM
Unknown Object (File)
Aug 28 2023, 10:10 PM
Unknown Object (File)
Aug 9 2023, 7:53 PM
Unknown Object (File)
Jul 7 2023, 5:17 PM
Unknown Object (File)
Jun 28 2023, 10:55 AM
Unknown Object (File)
Jun 21 2023, 1:12 AM
Unknown Object (File)
Jun 3 2023, 8:03 AM
Subscribers

Details

Summary

Rework the TLS 1.3 support in ISA-L to move the nonce work out of the seal routine and into the encrypt routine. Also obtain the nd.seqno in the TLS 1.2 case from the TLS record itself, as if we change to use a random starting value, this will prevent things from breaking due to the value on the wire being different from the passed in seqno.

Submitted by: jhb

Diff Detail

Repository
rP FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

jhb added inline comments.
security/ktls_isa-l_crypto-kmod/Makefile
6 ↗(On Diff #62797)

portlint wants this one line lower

This revision is now accepted and ready to land.Oct 1 2019, 5:55 PM

Moved PORTREVISION down a line to fix portlint complaint as pointed out by jhb

This revision now requires review to proceed.Oct 1 2019, 6:09 PM
This revision was not accepted when it landed; it landed in state Needs Review.Oct 6 2019, 1:42 AM
This revision was automatically updated to reflect the committed changes.