Page MenuHomeFreeBSD
Differential D39967

ossl: Add a fallback AES-GCM implementation using AES-NI
ClosedPublic
Actions

Authored by markj on May 4 2023, 7:10 PM.
Tags
None
Referenced Files
F139370322: D39967.id121581.diff
Thu, Dec 11, 8:54 AM
F139282061: D39967.id121581.diff
Wed, Dec 10, 10:15 AM
Unknown Object (File)
Nov 9 2025, 4:35 PM
Unknown Object (File)
Nov 9 2025, 4:35 PM
Unknown Object (File)
Nov 9 2025, 4:35 PM
Unknown Object (File)
Nov 9 2025, 4:35 PM
Unknown Object (File)
Nov 9 2025, 4:35 PM
Unknown Object (File)
Nov 9 2025, 12:31 PM
View All Files
Subscribers
christos
imp

Details

Reviewers
jhb
Commits
rG9b1d87286c78: ossl: Add a fallback AES-GCM implementation using AES-NI
Summary

This lets one use ossl(4) for AES-GCM operations on contemporary
amd64 platforms.

Bulk processing is done in aesni-gcm-x86_64.S, the rest is handled in a
C wrapper ported from OpenSSL's gcm128.c.

Sponsored by: Stormshield
Sponsored by: Klara, Inc.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.May 4 2023, 7:10 PM
Herald added a subscriber: imp. · View Herald TranscriptMay 4 2023, 7:10 PM
markj requested review of this revision.May 4 2023, 7:10 PM
Harbormaster completed remote builds in B51333: Diff 121526.May 4 2023, 7:10 PM
christos added a subscriber: christos.May 4 2023, 7:31 PM

Does the man page need an update to mention AES?

markj updated this revision to Diff 121552.May 5 2023, 1:18 AM
  • Mention AES-GCM in ossl.4.
Harbormaster completed remote builds in B51335: Diff 121552.May 5 2023, 1:18 AM
markj updated this revision to Diff 121581.May 5 2023, 5:51 PM

Port gcm128_(en|de)crypt_ctr32() as well, this includes loop unrolling which
helps throughput with small (< ~256) buffers that are not handled by the
bulk processing done in aesni_gcm_(en|de)crypt().

Harbormaster completed remote builds in B51346: Diff 121581.May 5 2023, 5:52 PM
jhb accepted this revision.May 8 2023, 6:03 PM
This revision is now accepted and ready to land.May 8 2023, 6:03 PM
Closed by commit rG9b1d87286c78: ossl: Add a fallback AES-GCM implementation using AES-NI (authored by markj). · Explain WhyJun 2 2023, 4:19 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rG9b1d87286c78: ossl: Add a fallback AES-GCM implementation using AES-NI.

Revision Contents
Changeset List

PathSize
share/
man/
man4/
4 lines
sys/
crypto/
openssl/
amd64/
475 lines
7 lines
modules/
ossl/
2 lines

Diff 122760

View Options

share/man/man4/ossl.4

Loading...
View Options

sys/crypto/openssl/amd64/ossl_aes_gcm.c

Loading...
View Options

sys/crypto/openssl/ossl_x86.c

Loading...
View Options

sys/modules/ossl/Makefile

Loading...