Page MenuHomeFreeBSD

Add a new COP_F_CIPHER_FIRST flag for struct crypt_op.
ClosedPublic

Authored by jhb on Jul 27 2017, 9:34 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, May 18, 6:05 AM
Unknown Object (File)
Fri, May 8, 8:59 PM
Unknown Object (File)
Fri, May 1, 9:30 PM
Unknown Object (File)
Sat, Apr 25, 10:29 PM
Unknown Object (File)
Apr 22 2026, 6:57 PM
Unknown Object (File)
Apr 7 2026, 11:29 AM
Unknown Object (File)
Apr 6 2026, 11:04 AM
Unknown Object (File)
Apr 5 2026, 2:04 PM

Details

Summary

Add a new COP_F_CIPHER_FIRST flag for struct crypt_op.

This requests that the cipher be performed before rather than after
the HMAC when both are specified for a single operation.

Test Plan
  • testing IPSec-like encrypt-then-authenticate operations from userland via the cryptocheck tool on ccr0 and cryptosoft
  • encryption operations need this flag for EtA while decryption operations do not

Diff Detail

Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 10706
Build 11106: arc lint + arc unit