Page MenuHomeFreeBSD
Differential D22364

Add support for ESN in cryptosoft
ClosedPublic
Actions

Authored by jaz_semihalf.com on Nov 14 2019, 12:22 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sun, Jul 26, 11:18 AM
Unknown Object (File)
Fri, Jul 24, 2:21 PM
Unknown Object (File)
Sat, Jul 18, 3:06 AM
Unknown Object (File)
Tue, Jul 14, 9:32 AM
Unknown Object (File)
Sun, Jul 12, 12:24 AM
Unknown Object (File)
Jun 15 2026, 6:01 PM
Unknown Object (File)
Jun 15 2026, 5:55 PM
Unknown Object (File)
Jun 15 2026, 2:16 PM
View All Files
Subscribers
imp

Details

Reviewers
mw
wma
jmg
pdk_semihalf.com
jhb
trasz
Group Reviewers
security
secteam
Commits
rS366753: Add support for ESN in cryptosoft
Summary

This patch adds support for IPSec ESN (Extended Sequence Numbers) in
encrypt and authenticate mode (eg. AES-CBC and SHA256) and combined mode
(eg. AES-GCM).

For encrypt and authenticate mode the ESN is stored in separate crp_esn
buffer because the high-order 32 bits of the sequence number are
appended after the Next Header (RFC 4303).

For combined modes the high-order 32 bits of the sequence number [e.g.
RFC 4106, Chapter 5 AAD Construction] are part of crp_aad (prepared by
netipsec layer in case of ESN support enabled), therefore non visible
diff around combined modes.

Diff Detail

Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

pdk_semihalf.com created this revision.Nov 14 2019, 12:22 PM
Herald added a reviewer: jmg. · View Herald TranscriptNov 14 2019, 12:22 PM
Herald added a subscriber: imp. · View Herald Transcript
trasz resigned from this revision.Jan 14 2020, 2:32 PM
jaz_semihalf.com commandeered this revision.May 14 2020, 2:02 PM
jaz_semihalf.com added a reviewer: pdk_semihalf.com.
jaz_semihalf.com updated this revision to Diff 71769.May 14 2020, 2:08 PM

Align to new OCF

jaz_semihalf.com added a parent revision: D24838: Prepare crypto framework for IPSec ESN support.May 14 2020, 2:29 PM
jaz_semihalf.com updated this revision to Diff 76979.Sep 13 2020, 5:41 PM
jaz_semihalf.com retitled this revision from Implement support for ESN in cryptosoft to Add support for ESN in cryptosoft.
jaz_semihalf.com edited the summary of this revision. (Show Details)
jaz_semihalf.com added a reviewer: jhb.Sep 24 2020, 4:23 PM
jhb accepted this revision.Sep 24 2020, 10:19 PM
This revision is now accepted and ready to land.Sep 24 2020, 10:19 PM
Closed by commit rS366753: Add support for ESN in cryptosoft (authored by mw). · Explain WhyOct 16 2020, 11:18 AM
This revision was automatically updated to reflect the committed changes.
mw added a commit: rS366753: Add support for ESN in cryptosoft.

Revision Contents
Changeset List

PathSize
sys/
opencrypto/
56 lines

Diff 71769

View Options

sys/opencrypto/cryptosoft.c

Loading...