Page MenuHomeFreeBSD
Differential D39967

ossl: Add a fallback AES-GCM implementation using AES-NI
ClosedPublic
Actions

Authored by markj on May 4 2023, 7:10 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Jun 25, 6:15 PM
Unknown Object (File)
Sun, Jun 23, 6:12 AM
Unknown Object (File)
Fri, Jun 21, 8:56 PM
Unknown Object (File)
Wed, Jun 19, 5:58 PM
Unknown Object (File)
Tue, Jun 18, 7:51 AM
Unknown Object (File)
Tue, Jun 18, 7:50 AM
Unknown Object (File)
Wed, Jun 12, 3:11 AM
Unknown Object (File)
May 17 2024, 2:00 AM
View All 36 Files
Subscribers
christos
imp

Details

Reviewers
jhb
Commits
rG9b1d87286c78: ossl: Add a fallback AES-GCM implementation using AES-NI
Summary

This lets one use ossl(4) for AES-GCM operations on contemporary
amd64 platforms.

Bulk processing is done in aesni-gcm-x86_64.S, the rest is handled in a
C wrapper ported from OpenSSL's gcm128.c.

Sponsored by: Stormshield
Sponsored by: Klara, Inc.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.May 4 2023, 7:10 PM
Herald added a subscriber: imp. · View Herald TranscriptMay 4 2023, 7:10 PM
markj requested review of this revision.May 4 2023, 7:10 PM
Harbormaster completed remote builds in B51333: Diff 121526.May 4 2023, 7:10 PM
christos added a subscriber: christos.May 4 2023, 7:31 PM

Does the man page need an update to mention AES?

markj updated this revision to Diff 121552.May 5 2023, 1:18 AM
  • Mention AES-GCM in ossl.4.
Harbormaster completed remote builds in B51335: Diff 121552.May 5 2023, 1:18 AM
markj updated this revision to Diff 121581.May 5 2023, 5:51 PM

Port gcm128_(en|de)crypt_ctr32() as well, this includes loop unrolling which
helps throughput with small (< ~256) buffers that are not handled by the
bulk processing done in aesni_gcm_(en|de)crypt().

Harbormaster completed remote builds in B51346: Diff 121581.May 5 2023, 5:52 PM
jhb accepted this revision.May 8 2023, 6:03 PM
This revision is now accepted and ready to land.May 8 2023, 6:03 PM
Closed by commit rG9b1d87286c78: ossl: Add a fallback AES-GCM implementation using AES-NI (authored by markj). · Explain WhyJun 2 2023, 4:19 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rG9b1d87286c78: ossl: Add a fallback AES-GCM implementation using AES-NI.

Revision Contents
Changeset List

PathSize
share/
man/
man4/
4 lines
sys/
crypto/
openssl/
amd64/
475 lines
7 lines
modules/
ossl/
2 lines

Diff 122760

View Options

share/man/man4/ossl.4

Loading...
View Options

sys/crypto/openssl/amd64/ossl_aes_gcm.c

Loading...
View Options

sys/crypto/openssl/ossl_x86.c

Loading...
View Options

sys/modules/ossl/Makefile

Loading...