Assume OCF is the only KTLS software backend.

[jhb]

Summary

This removes support for loadable software backends. The KTLS OCF
support is now always included in kernels with KERN_TLS and the
ktls_ocf.ko module has been removed. The software encryption routines
now take an mbuf directly and use the TLS mbuf as the crypto buffer
when possible.

Sponsored by: Netflix

[markj]

Nice cleanup.

sys/conf/files

4933

ktls_ocf.c sorts after gfmult.c.

sys/kern/uipc_ktls.c

2046–2047

Can we easily put the case below into a separate function?

sys/opencrypto/ktls_ocf.c

522

Doesn't it need to be crp.crp_payload_length + m->m_epg_hdrlen?

[markj]

sys/opencrypto/ktls_ocf.c

522

Never mind, I am wrong.

[jhb]

sys/kern/uipc_ktls.c

2046–2047

My WIP changes to add async mode move this around quite a bi, so I'd be inclined to refactor as part of those changes.

[markj]

sys/kern/uipc_ktls.c

2046–2047

Ok.

sys/opencrypto/ktls_ocf.c

375

Recomputing tls_comp_len here. I think it is unused, so maybe just drop that variable instead.

[jhb]

sys/opencrypto/ktls_ocf.c

375

It is used to set the inner frame length in the AAD (ad.tls_length). I will reuse it as I did in the other routines.

[jhb]

• Various review feedback.