Page MenuHomeFreeBSD

ossl: Add a fallback AES-GCM implementation using AES-NI
ClosedPublic

Authored by markj on May 4 2023, 7:10 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Nov 15, 10:29 PM
Unknown Object (File)
Fri, Nov 15, 9:03 PM
Unknown Object (File)
Fri, Nov 15, 7:52 PM
Unknown Object (File)
Thu, Nov 7, 3:50 PM
Unknown Object (File)
Wed, Oct 23, 8:51 AM
Unknown Object (File)
Tue, Oct 22, 5:39 PM
Unknown Object (File)
Tue, Oct 22, 3:54 PM
Unknown Object (File)
Oct 10 2024, 3:23 AM
Subscribers

Details

Summary

This lets one use ossl(4) for AES-GCM operations on contemporary
amd64 platforms.

Bulk processing is done in aesni-gcm-x86_64.S, the rest is handled in a
C wrapper ported from OpenSSL's gcm128.c.

Sponsored by: Stormshield
Sponsored by: Klara, Inc.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj requested review of this revision.May 4 2023, 7:10 PM

Does the man page need an update to mention AES?

  • Mention AES-GCM in ossl.4.

Port gcm128_(en|de)crypt_ctr32() as well, this includes loop unrolling which
helps throughput with small (< ~256) buffers that are not handled by the
bulk processing done in aesni_gcm_(en|de)crypt().

This revision is now accepted and ready to land.May 8 2023, 6:03 PM