OpenSSL: ktls: Initial support for ChaCha20-Poly1305

[jhb]

Summary

Linux kernel is going to support ChaCha20-Poly1305 in TLS offload.
Add support for this cipher.

Obtained from: OpenSSL (3aa7212e0a4fd1533c8a28b8587dd8b022f3a66f)
Sponsored by: Netflix
MFC after: 1 week

[zarychtam_plan-b.pwste.edu.pl]

Thank you for adding ChaCha20-Poly1305 support to KTLS and bringing it to the wider audience. I see these bits or at least "kern.ipc.tls.stats.ocf.tls13_chacha20_encrypts" in stable/13 since a while to, but can't make it working (GCM and CBC works fine). Does it require CURRENT or OpenSSL 3.0 to do the trick?

[jhb]

In D31439#763623, @zarychtam_plan-b.pwste.edu.pl wrote:

Thank you for adding ChaCha20-Poly1305 support to KTLS and bringing it to the wider audience. I see these bits or at least "kern.ipc.tls.stats.ocf.tls13_chacha20_encrypts" in stable/13 since a while to, but can't make it working (GCM and CBC works fine). Does it require CURRENT or OpenSSL 3.0 to do the trick?

Hmm, I thought I might have merged the OpenSSL change for chacha20 to stable/13 before the kernel support:

commit b08bb7f8961d1df15b41754a454d45aa333bb118
Author: John Baldwin <[e-mail]>
Date: Tue Aug 17 14:40:16 2021 -0700

OpenSSL: Add support for Chacha20-Poly1305 to kernel TLS on FreeBSD.

FreeBSD's kernel TLS supports Chacha20 for both TLS 1.2 and TLS 1.3.

NB: This commit has not yet been merged upstream as it is deemed a new
feature and did not make the feature freeze cutoff for OpenSSL 3.0.

Reviewed by:    jkim
Sponsored by:   Netflix
Differential Revision:  https://reviews.freebsd.org/D31443

(cherry picked from commit 6372fd253e3266c6eb271f49159f1632d527c9bd)

Note that OpenSSL 3.0 does not include this commit though (and the openssl 3.x ports don't have it, only OpenSSL in base).