Page MenuHomeFreeBSD

Add support for ESN in cryptosoft
ClosedPublic

Authored by jaz_semihalf.com on Nov 14 2019, 12:22 PM.
Tags
None
Referenced Files
Unknown Object (File)
Feb 16 2024, 7:13 PM
Unknown Object (File)
Feb 16 2024, 7:13 PM
Unknown Object (File)
Dec 20 2023, 5:53 AM
Unknown Object (File)
Dec 3 2023, 2:14 AM
Unknown Object (File)
Dec 3 2023, 2:14 AM
Unknown Object (File)
Dec 3 2023, 2:14 AM
Unknown Object (File)
Dec 3 2023, 2:14 AM
Unknown Object (File)
Dec 3 2023, 2:14 AM
Subscribers

Details

Summary

This patch adds support for IPSec ESN (Extended Sequence Numbers) in
encrypt and authenticate mode (eg. AES-CBC and SHA256) and combined mode
(eg. AES-GCM).

For encrypt and authenticate mode the ESN is stored in separate crp_esn
buffer because the high-order 32 bits of the sequence number are
appended after the Next Header (RFC 4303).

For combined modes the high-order 32 bits of the sequence number [e.g.
RFC 4106, Chapter 5 AAD Construction] are part of crp_aad (prepared by
netipsec layer in case of ESN support enabled), therefore non visible
diff around combined modes.

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

jaz_semihalf.com retitled this revision from Implement support for ESN in cryptosoft to Add support for ESN in cryptosoft.
jaz_semihalf.com edited the summary of this revision. (Show Details)
This revision is now accepted and ready to land.Sep 24 2020, 10:19 PM
This revision was automatically updated to reflect the committed changes.