Index: head/security/Makefile =================================================================== --- head/security/Makefile (revision 513186) +++ head/security/Makefile (revision 513187) @@ -1,1347 +1,1348 @@ # $FreeBSD$ # COMMENT = Security tools SUBDIR += 0d1n SUBDIR += 1password-client SUBDIR += 2fa SUBDIR += ADMsmb SUBDIR += ADMsnmp SUBDIR += R-cran-ROAuth SUBDIR += R-cran-askpass SUBDIR += R-cran-digest SUBDIR += R-cran-openssl SUBDIR += acme.sh SUBDIR += acmed SUBDIR += acmetool SUBDIR += aescrypt SUBDIR += aespipe SUBDIR += afl SUBDIR += afl++ SUBDIR += afterglow SUBDIR += aide SUBDIR += akmos SUBDIR += amap SUBDIR += amavis-stats SUBDIR += amavisd-milter SUBDIR += amavisd-new SUBDIR += apache-xml-security-c SUBDIR += apg SUBDIR += arirang SUBDIR += arm SUBDIR += arpCounterattack SUBDIR += asignify SUBDIR += authforce SUBDIR += autossh SUBDIR += avcheck SUBDIR += aws-iam-authenticator SUBDIR += axTLS SUBDIR += barnyard2 SUBDIR += barnyard2-sguil SUBDIR += base SUBDIR += base-audit SUBDIR += bastillion SUBDIR += bcrypt SUBDIR += bcwipe SUBDIR += bdes SUBDIR += bearssl SUBDIR += beecrypt SUBDIR += beid SUBDIR += belier SUBDIR += bfbtester SUBDIR += binwalk SUBDIR += blindelephant SUBDIR += boringssl SUBDIR += botan110 SUBDIR += botan2 SUBDIR += bro SUBDIR += broccoli SUBDIR += bruteblock SUBDIR += bruteforceblocker SUBDIR += bsdsfv SUBDIR += bsmtrace SUBDIR += bugs SUBDIR += bzrtp SUBDIR += ca_root_nss SUBDIR += caesarcipher SUBDIR += calife SUBDIR += cardpeek SUBDIR += cargo-audit SUBDIR += ccrypt SUBDIR += ccsrch SUBDIR += certificate-transparency SUBDIR += cfs SUBDIR += cfv SUBDIR += chaosreader SUBDIR += checkpassword SUBDIR += checkpassword-pam SUBDIR += chkrootkit SUBDIR += chntpw SUBDIR += chroot_safe SUBDIR += chrootuid SUBDIR += cisco-torch SUBDIR += ckpass SUBDIR += cksfv SUBDIR += cl-md5 SUBDIR += cl-md5-sbcl SUBDIR += clamassassin SUBDIR += clamav SUBDIR += clamav-milter SUBDIR += clamav-unofficial-sigs SUBDIR += clamd-stream-client SUBDIR += clamfs SUBDIR += clamsmtp SUBDIR += clamtk SUBDIR += cloak SUBDIR += clusterssh SUBDIR += cops SUBDIR += courier-authlib SUBDIR += courier-authlib-base SUBDIR += courierpassd SUBDIR += courierpasswd SUBDIR += courieruserinfo SUBDIR += cowrie SUBDIR += cp2fwb SUBDIR += cracklib SUBDIR += crackpkcs12 SUBDIR += create-cert SUBDIR += cryptlib SUBDIR += cryptopp SUBDIR += ct-submit SUBDIR += cvechecker SUBDIR += cvm SUBDIR += cyberchef SUBDIR += cyrus-sasl2 SUBDIR += cyrus-sasl2-gssapi SUBDIR += cyrus-sasl2-ldapdb SUBDIR += cyrus-sasl2-saslauthd SUBDIR += cyrus-sasl2-sql SUBDIR += cyrus-sasl2-srp SUBDIR += d0_blind_id SUBDIR += dcetest SUBDIR += ddos_scan SUBDIR += dehydrated SUBDIR += denyhosts SUBDIR += destroy SUBDIR += digest SUBDIR += dirbuster SUBDIR += dirmngr SUBDIR += distcache SUBDIR += dmitry SUBDIR += doas SUBDIR += doorman SUBDIR += doscan SUBDIR += dotdotpwn SUBDIR += dropbear SUBDIR += dsniff SUBDIR += dsvpn SUBDIR += duo SUBDIR += easy-rsa SUBDIR += elixir-comeonin SUBDIR += elixir-comeonin_i18n SUBDIR += elixir-jose SUBDIR += enchive SUBDIR += erlang-fast_tls SUBDIR += erlang-jose SUBDIR += eschalot SUBDIR += esteidfirefoxplugin SUBDIR += expiretable SUBDIR += f-prot SUBDIR += fakebo SUBDIR += fakeident SUBDIR += fakeroot SUBDIR += fbopenssl SUBDIR += fcheck SUBDIR += fcrackzip SUBDIR += fiked SUBDIR += find-zlib SUBDIR += firewalk SUBDIR += fl0p SUBDIR += flawfinder SUBDIR += fpc-openssl SUBDIR += fpm2 SUBDIR += fprint_demo SUBDIR += fprintd SUBDIR += fragroute SUBDIR += fragrouter SUBDIR += fsh SUBDIR += fswatch SUBDIR += ftimes SUBDIR += fuzz SUBDIR += fwanalog SUBDIR += fwbuilder SUBDIR += fwipe SUBDIR += fwknop SUBDIR += fwlogwatch SUBDIR += gag SUBDIR += gcipher SUBDIR += gcr SUBDIR += git-crypt SUBDIR += git-remote-gcrypt SUBDIR += git-secret SUBDIR += gnome-keyring SUBDIR += gnome-keyring-sharp SUBDIR += gnome-password-generator SUBDIR += gnome-ssh-askpass SUBDIR += gnomint SUBDIR += gnupg SUBDIR += gnupg1 SUBDIR += gnutls SUBDIR += go-cve-dictionary SUBDIR += gonepass SUBDIR += gopass SUBDIR += gorilla SUBDIR += gost-engine SUBDIR += govpn SUBDIR += gpa SUBDIR += gpgdir SUBDIR += gpgme SUBDIR += gpgme-cpp SUBDIR += gpgme-qt5 SUBDIR += gputty SUBDIR += greenbone-security-assistant8 SUBDIR += greenbone-security-assistant9 SUBDIR += gringotts SUBDIR += gsasl SUBDIR += gss SUBDIR += gstreamer1-plugins-dtls SUBDIR += gtkpasman SUBDIR += gwee SUBDIR += hackbot SUBDIR += hardening-check SUBDIR += hashcat SUBDIR += hashcat-legacy SUBDIR += heimdal SUBDIR += highwayhash SUBDIR += hitch SUBDIR += hlfl SUBDIR += hmap SUBDIR += hockeypuck SUBDIR += honggfuzz SUBDIR += hotssh SUBDIR += hpenc SUBDIR += httprint SUBDIR += hydra SUBDIR += i2p SUBDIR += i2pd SUBDIR += iaikpkcs11wrapper SUBDIR += idea SUBDIR += identify SUBDIR += ike SUBDIR += ike-scan SUBDIR += integrit SUBDIR += ipfcount SUBDIR += ipfilter2dshield SUBDIR += ipfmeta SUBDIR += ipfw2dshield SUBDIR += ipfwcount SUBDIR += ipguard SUBDIR += ipsec-tools SUBDIR += ipv6toolkit SUBDIR += isakmpd SUBDIR += ismtp SUBDIR += isnprober SUBDIR += jbrofuzz SUBDIR += john SUBDIR += kbfsd SUBDIR += kc24 SUBDIR += kdbx-viewer SUBDIR += kedpm SUBDIR += keepass SUBDIR += keepass-plugin-keepassrpc SUBDIR += keepassx-devel SUBDIR += keepassxc SUBDIR += keybase SUBDIR += keychain SUBDIR += keynote SUBDIR += keyprint SUBDIR += kf5-kdesu SUBDIR += kgpg SUBDIR += kickpass SUBDIR += klee SUBDIR += kleopatra SUBDIR += knock SUBDIR += knocker SUBDIR += kpcli SUBDIR += kpkpass SUBDIR += krb5 SUBDIR += krb5-115 SUBDIR += krb5-116 SUBDIR += krb5-117 SUBDIR += krb5-appl SUBDIR += krb5-devel SUBDIR += kripp SUBDIR += kstart + SUBDIR += ktls_isa-l_crypto-kmod SUBDIR += kwalletmanager SUBDIR += l0pht-watch SUBDIR += l0phtcrack SUBDIR += l5 SUBDIR += lasso SUBDIR += lastpass-cli SUBDIR += lego SUBDIR += libadacrypt SUBDIR += libargon2 SUBDIR += libassuan SUBDIR += libbf SUBDIR += libcryptui SUBDIR += libdecaf SUBDIR += libecc SUBDIR += libfido2 SUBDIR += libfprint SUBDIR += libgcrypt SUBDIR += libgnome-keyring SUBDIR += libgpg-error SUBDIR += libgringotts SUBDIR += libhijack SUBDIR += libident SUBDIR += libkleo SUBDIR += libkpass SUBDIR += libksba SUBDIR += libmcrypt SUBDIR += libntlm SUBDIR += libotr SUBDIR += libotr3 SUBDIR += libp11 SUBDIR += libprelude SUBDIR += libpreludedb SUBDIR += libpwquality SUBDIR += libpwstor SUBDIR += libressl SUBDIR += libressl-devel SUBDIR += libscrypt SUBDIR += libsecret SUBDIR += libsectok SUBDIR += libsodium SUBDIR += libsparkcrypto SUBDIR += libssh SUBDIR += libssh2 SUBDIR += libtasn1 SUBDIR += libtomcrypt SUBDIR += libu2f-host SUBDIR += libuecc SUBDIR += libwhisker SUBDIR += libyubikey SUBDIR += libzrtpcppcore SUBDIR += linux-c6-audit-libs SUBDIR += linux-c6-cyrus-sasl2 SUBDIR += linux-c6-gnutls SUBDIR += linux-c6-libgcrypt SUBDIR += linux-c6-libgpg-error SUBDIR += linux-c6-libssh2 SUBDIR += linux-c6-libtasn1 SUBDIR += linux-c6-nss SUBDIR += linux-c6-openssl SUBDIR += linux-c6-pam SUBDIR += linux-c7-cyrus-sasl2 SUBDIR += linux-c7-gnutls SUBDIR += linux-c7-libgcrypt SUBDIR += linux-c7-libgpg-error SUBDIR += linux-c7-libssh2 SUBDIR += linux-c7-libtasn1 SUBDIR += linux-c7-nettle SUBDIR += linux-c7-nss SUBDIR += linux-c7-p11-kit SUBDIR += linux-c7-trousers SUBDIR += log2timeline SUBDIR += logcheck SUBDIR += lua-bcrypt SUBDIR += luasec SUBDIR += luasec-51 SUBDIR += lxqt-openssh-askpass SUBDIR += lxqt-sudo SUBDIR += lynis SUBDIR += mac-robber SUBDIR += maia SUBDIR += mailzu SUBDIR += makepasswd SUBDIR += maltrail SUBDIR += manipulate_data SUBDIR += masscan SUBDIR += matrixssl SUBDIR += mbedtls SUBDIR += mcrypt SUBDIR += md4coll SUBDIR += md5coll SUBDIR += md5deep SUBDIR += medusa SUBDIR += meek SUBDIR += metasploit SUBDIR += mhash SUBDIR += mindterm-binary SUBDIR += minisign SUBDIR += mkp224o SUBDIR += modsecurity3 SUBDIR += modsecurity3-apache SUBDIR += modsecurity3-nginx SUBDIR += monkeysphere SUBDIR += morphis SUBDIR += munge SUBDIR += mussh SUBDIR += n2n SUBDIR += nacl SUBDIR += ncrack SUBDIR += ncrypt SUBDIR += netpgp SUBDIR += nettle SUBDIR += nextcloud-passman SUBDIR += nextcloud-twofactor_totp SUBDIR += nextcloud-twofactor_u2f SUBDIR += ngrok SUBDIR += nikto SUBDIR += nist-kat SUBDIR += nmap SUBDIR += nss SUBDIR += nss_compat_ossl SUBDIR += nyx SUBDIR += oath-toolkit SUBDIR += obfs4proxy-tor SUBDIR += obfsclient SUBDIR += ocaml-cryptgps SUBDIR += ocaml-cryptokit SUBDIR += ocaml-ssl SUBDIR += oidentd SUBDIR += oinkmaster SUBDIR += olm SUBDIR += onionscan SUBDIR += op SUBDIR += openbsm SUBDIR += openca-tools-forked SUBDIR += opencdk SUBDIR += openconnect SUBDIR += openconnect-gui SUBDIR += opencryptoki SUBDIR += openct SUBDIR += openfortivpn SUBDIR += openiked SUBDIR += opensaml SUBDIR += opensc SUBDIR += openscep SUBDIR += openssh-askpass SUBDIR += openssh-portable SUBDIR += openssl SUBDIR += openssl-unsafe SUBDIR += openssl111 SUBDIR += openssl_tpm_engine SUBDIR += openvas8 SUBDIR += openvas8-cli SUBDIR += openvas8-libraries SUBDIR += openvas8-manager SUBDIR += openvas8-scanner SUBDIR += openvas9 SUBDIR += openvas9-cli SUBDIR += openvas9-libraries SUBDIR += openvas9-manager SUBDIR += openvas9-scanner SUBDIR += openvpn SUBDIR += openvpn-admin SUBDIR += openvpn-auth-ldap SUBDIR += openvpn-auth-radius SUBDIR += openvpn-auth-script SUBDIR += openvpn-devel SUBDIR += openvpn-mbedtls SUBDIR += ophcrack SUBDIR += orthrus SUBDIR += osiris SUBDIR += ossec-hids SUBDIR += ossec-hids-agent SUBDIR += ossec-hids-agent-config SUBDIR += ossec-hids-local SUBDIR += ossec-hids-local-config SUBDIR += ossec-hids-server SUBDIR += ossec-hids-server-config SUBDIR += osslsigncode SUBDIR += otpw SUBDIR += outguess SUBDIR += owasp-dependency-check SUBDIR += p11-kit SUBDIR += p5-Alt-Crypt-RSA-BigInt SUBDIR += p5-Apache-Htpasswd SUBDIR += p5-App-Genpass SUBDIR += p5-App-TLSMe SUBDIR += p5-Auth-YubikeyDecrypter SUBDIR += p5-AuthCAS SUBDIR += p5-Authen-Bitcard SUBDIR += p5-Authen-Captcha SUBDIR += p5-Authen-CyrusSASL SUBDIR += p5-Authen-DecHpwd SUBDIR += p5-Authen-Htpasswd SUBDIR += p5-Authen-Krb5 SUBDIR += p5-Authen-Krb5-Simple SUBDIR += p5-Authen-Libwrap SUBDIR += p5-Authen-NTLM SUBDIR += p5-Authen-OATH SUBDIR += p5-Authen-PAAS SUBDIR += p5-Authen-PAM SUBDIR += p5-Authen-Passphrase SUBDIR += p5-Authen-PluggableCaptcha SUBDIR += p5-Authen-Radius SUBDIR += p5-Authen-SASL SUBDIR += p5-Authen-SASL-Cyrus SUBDIR += p5-Authen-SASL-SASLprep SUBDIR += p5-Authen-SCRAM SUBDIR += p5-Authen-Simple SUBDIR += p5-Authen-Simple-DBI SUBDIR += p5-Authen-Simple-DBM SUBDIR += p5-Authen-Simple-HTTP SUBDIR += p5-Authen-Simple-Kerberos SUBDIR += p5-Authen-Simple-LDAP SUBDIR += p5-Authen-Simple-Net SUBDIR += p5-Authen-Simple-PAM SUBDIR += p5-Authen-Simple-Passwd SUBDIR += p5-Authen-Simple-RADIUS SUBDIR += p5-Authen-Simple-SMB SUBDIR += p5-Authen-Simple-SSH SUBDIR += p5-Authen-Smb SUBDIR += p5-Authen-TacacsPlus SUBDIR += p5-Authen-Ticket SUBDIR += p5-Authen-TypeKey SUBDIR += p5-Business-PayPal-EWP SUBDIR += p5-Bytes-Random-Secure SUBDIR += p5-Bytes-Random-Secure-Tiny SUBDIR += p5-CACertOrg-CA SUBDIR += p5-CSP SUBDIR += p5-Cisco-Hash SUBDIR += p5-Crypt-Anubis SUBDIR += p5-Crypt-AppleTwoFish SUBDIR += p5-Crypt-Blowfish SUBDIR += p5-Crypt-Blowfish_PP SUBDIR += p5-Crypt-CAST5 SUBDIR += p5-Crypt-CAST5_PP SUBDIR += p5-Crypt-CBC SUBDIR += p5-Crypt-CBCeasy SUBDIR += p5-Crypt-CFB SUBDIR += p5-Crypt-Caesar SUBDIR += p5-Crypt-Camellia_PP SUBDIR += p5-Crypt-Chimera SUBDIR += p5-Crypt-CipherSaber SUBDIR += p5-Crypt-Cracklib SUBDIR += p5-Crypt-Ctr SUBDIR += p5-Crypt-Curve25519 SUBDIR += p5-Crypt-DES SUBDIR += p5-Crypt-DES_EDE3 SUBDIR += p5-Crypt-DES_PP SUBDIR += p5-Crypt-DH SUBDIR += p5-Crypt-DSA SUBDIR += p5-Crypt-Dining SUBDIR += p5-Crypt-ECB SUBDIR += p5-Crypt-Eksblowfish SUBDIR += p5-Crypt-Enigma SUBDIR += p5-Crypt-Format SUBDIR += p5-Crypt-GCrypt SUBDIR += p5-Crypt-GOST SUBDIR += p5-Crypt-GOST_PP SUBDIR += p5-Crypt-GPG SUBDIR += p5-Crypt-GeneratePassword SUBDIR += p5-Crypt-HCE_MD5 SUBDIR += p5-Crypt-HCE_SHA SUBDIR += p5-Crypt-IDEA SUBDIR += p5-Crypt-Imail SUBDIR += p5-Crypt-Juniper SUBDIR += p5-Crypt-Khazad SUBDIR += p5-Crypt-LE SUBDIR += p5-Crypt-License SUBDIR += p5-Crypt-Lite SUBDIR += p5-Crypt-Loki97 SUBDIR += p5-Crypt-MySQL SUBDIR += p5-Crypt-NULL SUBDIR += p5-Crypt-OFB SUBDIR += p5-Crypt-OICQ SUBDIR += p5-Crypt-OTP SUBDIR += p5-Crypt-OpenPGP SUBDIR += p5-Crypt-OpenSSL-AES SUBDIR += p5-Crypt-OpenSSL-Bignum SUBDIR += p5-Crypt-OpenSSL-CA SUBDIR += p5-Crypt-OpenSSL-DSA SUBDIR += p5-Crypt-OpenSSL-EC SUBDIR += p5-Crypt-OpenSSL-ECDSA SUBDIR += p5-Crypt-OpenSSL-Guess SUBDIR += p5-Crypt-OpenSSL-PKCS10 SUBDIR += p5-Crypt-OpenSSL-RSA SUBDIR += p5-Crypt-OpenSSL-Random SUBDIR += p5-Crypt-OpenSSL-X509 SUBDIR += p5-Crypt-PBKDF2 SUBDIR += p5-Crypt-PKCS10 SUBDIR += p5-Crypt-PWSafe3 SUBDIR += p5-Crypt-PassGen SUBDIR += p5-Crypt-Passwd-XS SUBDIR += p5-Crypt-PasswdMD5 SUBDIR += p5-Crypt-Password-Util SUBDIR += p5-Crypt-Perl SUBDIR += p5-Crypt-Primes SUBDIR += p5-Crypt-RC4 SUBDIR += p5-Crypt-RC5 SUBDIR += p5-Crypt-RC6 SUBDIR += p5-Crypt-RHash SUBDIR += p5-Crypt-RIPEMD160 SUBDIR += p5-Crypt-RSA SUBDIR += p5-Crypt-RSA-Parse SUBDIR += p5-Crypt-RSA-Yandex SUBDIR += p5-Crypt-Rabbit SUBDIR += p5-Crypt-RandPasswd SUBDIR += p5-Crypt-Random SUBDIR += p5-Crypt-Random-Seed SUBDIR += p5-Crypt-Random-Source SUBDIR += p5-Crypt-Random-TESHA2 SUBDIR += p5-Crypt-Rijndael SUBDIR += p5-Crypt-Rijndael_PP SUBDIR += p5-Crypt-SKey SUBDIR += p5-Crypt-SMIME SUBDIR += p5-Crypt-SSLeay SUBDIR += p5-Crypt-Salt SUBDIR += p5-Crypt-SaltedHash SUBDIR += p5-Crypt-Serpent SUBDIR += p5-Crypt-Shark SUBDIR += p5-Crypt-Simple SUBDIR += p5-Crypt-SmbHash SUBDIR += p5-Crypt-Sodium SUBDIR += p5-Crypt-Solitaire SUBDIR += p5-Crypt-TEA SUBDIR += p5-Crypt-T_e_a SUBDIR += p5-Crypt-Tea_JS SUBDIR += p5-Crypt-TripleDES SUBDIR += p5-Crypt-Twofish SUBDIR += p5-Crypt-Twofish2 SUBDIR += p5-Crypt-Twofish_PP SUBDIR += p5-Crypt-URandom SUBDIR += p5-Crypt-UnixCrypt SUBDIR += p5-Crypt-UnixCrypt_XS SUBDIR += p5-Crypt-X509 SUBDIR += p5-Crypt-X509-CRL SUBDIR += p5-Crypt-XTEA SUBDIR += p5-Crypt-xDBM_File SUBDIR += p5-CryptX SUBDIR += p5-Dancer-Plugin-Auth-Extensible SUBDIR += p5-Dancer-Plugin-Auth-Extensible-Provider-Usergroup SUBDIR += p5-Dancer-Plugin-Passphrase SUBDIR += p5-Dancer2-Plugin-Auth-Extensible SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-DBIC SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-Database SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-IMAP SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-Usergroup SUBDIR += p5-Dancer2-Plugin-Passphrase SUBDIR += p5-Data-Entropy SUBDIR += p5-Data-Password SUBDIR += p5-Digest SUBDIR += p5-Digest-Adler32 SUBDIR += p5-Digest-Bcrypt SUBDIR += p5-Digest-BubbleBabble SUBDIR += p5-Digest-CRC SUBDIR += p5-Digest-Crc32 SUBDIR += p5-Digest-DJB SUBDIR += p5-Digest-DMAC SUBDIR += p5-Digest-EMAC SUBDIR += p5-Digest-Elf SUBDIR += p5-Digest-FNV SUBDIR += p5-Digest-GOST SUBDIR += p5-Digest-HMAC SUBDIR += p5-Digest-Hashcash SUBDIR += p5-Digest-Haval256 SUBDIR += p5-Digest-JHash SUBDIR += p5-Digest-MD2 SUBDIR += p5-Digest-MD4 SUBDIR += p5-Digest-MD5 SUBDIR += p5-Digest-MD5-File SUBDIR += p5-Digest-MD5-M4p SUBDIR += p5-Digest-MD5-Reverse SUBDIR += p5-Digest-ManberHash SUBDIR += p5-Digest-MurmurHash SUBDIR += p5-Digest-Nilsimsa SUBDIR += p5-Digest-Pearson SUBDIR += p5-Digest-Pearson-PurePerl SUBDIR += p5-Digest-Perl-MD4 SUBDIR += p5-Digest-Perl-MD5 SUBDIR += p5-Digest-SHA SUBDIR += p5-Digest-SHA-PurePerl SUBDIR += p5-Digest-SHA1 SUBDIR += p5-Digest-SHA3 SUBDIR += p5-Digest-SV1 SUBDIR += p5-Digest-Tiger SUBDIR += p5-Digest-Whirlpool SUBDIR += p5-File-KeePass SUBDIR += p5-File-KeePass-Agent SUBDIR += p5-File-Scan SUBDIR += p5-File-Scan-ClamAV SUBDIR += p5-Filter-CBC SUBDIR += p5-Filter-Crypto SUBDIR += p5-GD-SecurityImage SUBDIR += p5-GSSAPI SUBDIR += p5-GnuPG SUBDIR += p5-GnuPG-Interface SUBDIR += p5-HTML-Email-Obfuscate SUBDIR += p5-Heimdal-Kadm5 SUBDIR += p5-IO-Async-SSL SUBDIR += p5-IO-Socket-SSL SUBDIR += p5-MD5 SUBDIR += p5-Mcrypt SUBDIR += p5-Module-Signature SUBDIR += p5-Net-Daemon-SSL SUBDIR += p5-Net-OpenID-Common SUBDIR += p5-Net-OpenID-JanRain SUBDIR += p5-Net-OpenID-Server SUBDIR += p5-Net-Radius-Server SUBDIR += p5-Net-SAML SUBDIR += p5-Net-SSH-AuthorizedKeysFile SUBDIR += p5-Net-SSL-ExpireDate SUBDIR += p5-Net-SSLGlue SUBDIR += p5-Net-SSLeay SUBDIR += p5-Net-Server-Mail-ESMTP-AUTH SUBDIR += p5-Net-SinFP SUBDIR += p5-Nmap-Parser SUBDIR += p5-Nmap-Scanner SUBDIR += p5-OpenCA-CRL SUBDIR += p5-OpenCA-CRR SUBDIR += p5-OpenCA-OpenSSL SUBDIR += p5-OpenCA-PKCS7 SUBDIR += p5-OpenCA-REQ SUBDIR += p5-OpenCA-X509 SUBDIR += p5-PBKDF2-Tiny SUBDIR += p5-PGP SUBDIR += p5-PGP-Sign SUBDIR += p5-POE-Component-SSLify SUBDIR += p5-POE-Filter-SSL SUBDIR += p5-Parse-Snort SUBDIR += p5-PerlCryptLib SUBDIR += p5-Protocol-ACME SUBDIR += p5-SAVI-Perl SUBDIR += p5-SHA SUBDIR += p5-Safe-Hole SUBDIR += p5-Session-Token SUBDIR += p5-Snort-Rule SUBDIR += p5-String-MkPasswd SUBDIR += p5-Sudo SUBDIR += p5-Text-Password-Pronounceable SUBDIR += p5-Tie-EncryptedHash SUBDIR += p5-Tree-Authz SUBDIR += p5-Unix-Passwd-File SUBDIR += p5-Unix-setuid SUBDIR += p5-Yahoo-BBAuth SUBDIR += p5-dicewaregen SUBDIR += p5-openxpki SUBDIR += p5-openxpki-i18n SUBDIR += p5-plog SUBDIR += pad SUBDIR += pam-modules SUBDIR += pam-mysql SUBDIR += pam-pgsql SUBDIR += pam_fprint SUBDIR += pam_google_authenticator SUBDIR += pam_helper SUBDIR += pam_jail SUBDIR += pam_kde SUBDIR += pam_krb5 SUBDIR += pam_krb5-rh SUBDIR += pam_ldap SUBDIR += pam_mkhomedir SUBDIR += pam_ocra SUBDIR += pam_p11 SUBDIR += pam_per_user SUBDIR += pam_pseudo SUBDIR += pam_pwdfile SUBDIR += pam_require SUBDIR += pam_search_list SUBDIR += pam_ssh_agent_auth SUBDIR += pam_yubico SUBDIR += pamtester SUBDIR += paperkey SUBDIR += parano SUBDIR += passivedns SUBDIR += pbc SUBDIR += pbnj SUBDIR += pcsc-tools SUBDIR += pdfcrack SUBDIR += pear-Auth SUBDIR += pear-Auth_HTTP SUBDIR += pear-Auth_PrefManager SUBDIR += pear-Auth_SASL SUBDIR += pear-Auth_SASL2 SUBDIR += pear-Crypt_Blowfish SUBDIR += pear-Crypt_CBC SUBDIR += pear-Crypt_CHAP SUBDIR += pear-Crypt_DiffieHellman SUBDIR += pear-Crypt_GPG SUBDIR += pear-Crypt_HMAC2 SUBDIR += pear-Crypt_MicroID SUBDIR += pear-Crypt_RC4 SUBDIR += pear-Crypt_RSA SUBDIR += pear-Crypt_XXTEA SUBDIR += pear-File_HtAccess SUBDIR += pear-File_Passwd SUBDIR += pear-File_SMBPasswd SUBDIR += pear-HTML_Crypt SUBDIR += pear-Horde_Auth SUBDIR += pear-Horde_Crypt SUBDIR += pear-Horde_Crypt_Blowfish SUBDIR += pear-Horde_Group SUBDIR += pear-Horde_Oauth SUBDIR += pear-Horde_Perms SUBDIR += pear-Horde_Secret SUBDIR += pear-Horde_Share SUBDIR += pear-LiveUser SUBDIR += pear-LiveUser_Admin SUBDIR += pear-Net_Portscan SUBDIR += pear-Text_Password SUBDIR += pecl-crypto SUBDIR += pecl-gnupg SUBDIR += pecl-krb5 SUBDIR += pecl-libsodium SUBDIR += pecl-mcrypt SUBDIR += pecl-pam SUBDIR += pecl-scrypt SUBDIR += pecl-ssh2 SUBDIR += peda SUBDIR += pev SUBDIR += pgpdump SUBDIR += pgpgpg SUBDIR += pgpin SUBDIR += php71-filter SUBDIR += php71-hash SUBDIR += php71-mcrypt SUBDIR += php71-openssl SUBDIR += php72-filter SUBDIR += php72-hash SUBDIR += php72-openssl SUBDIR += php72-sodium SUBDIR += php73-filter SUBDIR += php73-hash SUBDIR += php73-openssl SUBDIR += php73-sodium SUBDIR += php74-filter SUBDIR += php74-openssl SUBDIR += php74-sodium SUBDIR += phpsecinfo SUBDIR += picosha2 SUBDIR += pidentd SUBDIR += pidgin-encryption SUBDIR += pidgin-otr SUBDIR += pinentry SUBDIR += pinentry-curses SUBDIR += pinentry-fltk SUBDIR += pinentry-gnome3 SUBDIR += pinentry-gtk2 SUBDIR += pinentry-qt5 SUBDIR += pinentry-tty SUBDIR += pixiewps SUBDIR += pkcrack SUBDIR += pkcs11-dump SUBDIR += pkcs11-gateway SUBDIR += pkcs11-helper SUBDIR += pkesh SUBDIR += pks SUBDIR += pktsuckers SUBDIR += plasma5-kscreenlocker SUBDIR += plasma5-ksshaskpass SUBDIR += plasma5-kwallet-pam SUBDIR += please SUBDIR += poly1305aes SUBDIR += portsentry SUBDIR += ppars SUBDIR += proftpd-mod_clamav SUBDIR += proxycheck SUBDIR += proxytunnel SUBDIR += pscan SUBDIR += pssh SUBDIR += pulledpork SUBDIR += pure-sfv SUBDIR += putty SUBDIR += putty-gtk2 SUBDIR += putty-nogtk SUBDIR += pvk SUBDIR += pwauth SUBDIR += pwman SUBDIR += pwman3 SUBDIR += pwned-check SUBDIR += pxytest SUBDIR += py-AccessControl SUBDIR += py-PF SUBDIR += py-Products.PlonePAS SUBDIR += py-Products.PluggableAuthService SUBDIR += py-RestrictedPython SUBDIR += py-SecretStorage SUBDIR += py-YubiOTP SUBDIR += py-acme SUBDIR += py-acme-tiny SUBDIR += py-argon2-cffi SUBDIR += py-artifacts SUBDIR += py-asyncssh SUBDIR += py-backports.ssl_match_hostname SUBDIR += py-bcrypt SUBDIR += py-borg.localrole SUBDIR += py-btchip-python SUBDIR += py-cerealizer SUBDIR += py-certbot SUBDIR += py-certbot-apache SUBDIR += py-certbot-dns-cloudflare SUBDIR += py-certbot-dns-cloudxns SUBDIR += py-certbot-dns-digitalocean SUBDIR += py-certbot-dns-dnsimple SUBDIR += py-certbot-dns-dnsmadeeasy SUBDIR += py-certbot-dns-gehirn SUBDIR += py-certbot-dns-google SUBDIR += py-certbot-dns-linode SUBDIR += py-certbot-dns-luadns SUBDIR += py-certbot-dns-nsone SUBDIR += py-certbot-dns-ovh SUBDIR += py-certbot-dns-rfc2136 SUBDIR += py-certbot-dns-route53 SUBDIR += py-certbot-dns-sakuracloud SUBDIR += py-certbot-nginx SUBDIR += py-certifi SUBDIR += py-certstream SUBDIR += py-ckcc-protocol SUBDIR += py-cpe SUBDIR += py-cracklib SUBDIR += py-cryptkit SUBDIR += py-cryptlib_py SUBDIR += py-cryptography SUBDIR += py-cryptography-vectors SUBDIR += py-cybox SUBDIR += py-dfdatetime SUBDIR += py-dfvfs SUBDIR += py-dfwinreg SUBDIR += py-docker-pycreds SUBDIR += py-ecdsa SUBDIR += py-ed25519ll SUBDIR += py-exscript SUBDIR += py-fail2ban SUBDIR += py-fchksum SUBDIR += py-fido2 SUBDIR += py-first-server SUBDIR += py-flask-httpauth SUBDIR += py-flask-kerberos SUBDIR += py-flask-saml SUBDIR += py-fteproxy SUBDIR += py-gixy SUBDIR += py-gnupg SUBDIR += py-gnutls SUBDIR += py-google-auth SUBDIR += py-google-auth-httplib2 SUBDIR += py-gpgme SUBDIR += py-gpsoauth SUBDIR += py-gssapi SUBDIR += py-halberd SUBDIR += py-hkdf SUBDIR += py-htpasswd SUBDIR += py-itsdangerous SUBDIR += py-josepy SUBDIR += py-keepkey SUBDIR += py-kerberos SUBDIR += py-keyczar SUBDIR += py-keyring SUBDIR += py-keyrings.alt SUBDIR += py-keystone SUBDIR += py-libnacl SUBDIR += py-m2crypto SUBDIR += py-maec SUBDIR += py-mcrypt SUBDIR += py-mhash SUBDIR += py-mixbox SUBDIR += py-mnemonic SUBDIR += py-msoffcrypto-tool SUBDIR += py-muacrypt SUBDIR += py-netmiko SUBDIR += py-ntlm-auth SUBDIR += py-oauth2client SUBDIR += py-oauthlib SUBDIR += py-obfsproxy-tor SUBDIR += py-onetime SUBDIR += py-openssl SUBDIR += py-ospd SUBDIR += py-paramiko SUBDIR += py-paramiko1 SUBDIR += py-pass-audit SUBDIR += py-passlib SUBDIR += py-pbkdf2 SUBDIR += py-pgpdump SUBDIR += py-plaso SUBDIR += py-plone.app.openid SUBDIR += py-plone.keyring SUBDIR += py-plone.openid SUBDIR += py-plone.protect SUBDIR += py-plone.session SUBDIR += py-potr SUBDIR += py-pow SUBDIR += py-pyaes SUBDIR += py-pyaff4 SUBDIR += py-pyaxo SUBDIR += py-pyblake2 SUBDIR += py-pyclamd SUBDIR += py-pycrypto SUBDIR += py-pycryptodome SUBDIR += py-pycryptodomex SUBDIR += py-pycryptopp SUBDIR += py-pydeep SUBDIR += py-pyelliptic SUBDIR += py-pylibacl SUBDIR += py-pymacaroons-pynacl SUBDIR += py-pynacl SUBDIR += py-pyotp SUBDIR += py-pyptlib SUBDIR += py-pysaml2 SUBDIR += py-pyscard SUBDIR += py-pysha3 SUBDIR += py-pysodium SUBDIR += py-python-axolotl SUBDIR += py-python-axolotl-curve25519 SUBDIR += py-python-gnupg SUBDIR += py-python-jose SUBDIR += py-python-nss SUBDIR += py-python-openid SUBDIR += py-python-pam SUBDIR += py-python-registry SUBDIR += py-python3-openid SUBDIR += py-pywinrm SUBDIR += py-rekall SUBDIR += py-rekall-core SUBDIR += py-rekall_lib SUBDIR += py-requests-credssp SUBDIR += py-requests-kerberos SUBDIR += py-rsa SUBDIR += py-safe SUBDIR += py-scp SUBDIR += py-scrypt SUBDIR += py-securesystemslib SUBDIR += py-service_identity SUBDIR += py-signedjson SUBDIR += py-slowaes SUBDIR += py-social-auth-core SUBDIR += py-spake2 SUBDIR += py-ssh SUBDIR += py-ssh-audit SUBDIR += py-sslstrip SUBDIR += py-stem SUBDIR += py-stix SUBDIR += py-stix2 SUBDIR += py-stix2-patterns SUBDIR += py-taxii2-client SUBDIR += py-tlslite SUBDIR += py-trezor SUBDIR += py-trustedpickle SUBDIR += py-trustme SUBDIR += py-tuf SUBDIR += py-twofish SUBDIR += py-txtorcon SUBDIR += py-virustotal-api SUBDIR += py-volatility SUBDIR += py-vulndb SUBDIR += py-xmlsec SUBDIR += py-yara SUBDIR += py-yubikey-manager SUBDIR += py-zkg SUBDIR += py-zope.app.authentication SUBDIR += py-zope.app.localpermission SUBDIR += py-zope.app.principalannotation SUBDIR += py-zope.app.security SUBDIR += py-zope.app.securitypolicy SUBDIR += py-zope.authentication SUBDIR += py-zope.login SUBDIR += py-zope.password SUBDIR += py-zope.pluggableauth SUBDIR += py-zope.principalannotation SUBDIR += py-zope.principalregistry SUBDIR += py-zope.security SUBDIR += py-zope.securitypolicy SUBDIR += py-zope.session SUBDIR += py-zxcvbn SUBDIR += qtkeychain SUBDIR += quantis-kmod SUBDIR += racoon2 SUBDIR += radamsa SUBDIR += ranpwd SUBDIR += ratproxy SUBDIR += rats SUBDIR += razorback-api SUBDIR += razorback-archiveInflate SUBDIR += razorback-clamavNugget SUBDIR += razorback-dispatcher SUBDIR += razorback-fileInject SUBDIR += razorback-fsMonitor SUBDIR += razorback-fsWalk SUBDIR += razorback-masterNugget SUBDIR += razorback-officeCat SUBDIR += razorback-pdfFox SUBDIR += razorback-scriptNugget SUBDIR += razorback-swfScanner SUBDIR += razorback-syslogNugget SUBDIR += razorback-virusTotal SUBDIR += razorback-yaraNugget SUBDIR += rcracki_mt SUBDIR += rdigest SUBDIR += regripper SUBDIR += reop SUBDIR += retranslator SUBDIR += revealrk SUBDIR += revelation SUBDIR += rhash SUBDIR += ridl SUBDIR += rifiuti2 SUBDIR += rkhunter SUBDIR += rndpassw SUBDIR += ruby-bitwarden SUBDIR += ruby-camellia SUBDIR += rubygem-acme-client SUBDIR += rubygem-aes_key_wrap SUBDIR += rubygem-airbrussh SUBDIR += rubygem-attr_encrypted SUBDIR += rubygem-bcrypt SUBDIR += rubygem-bcrypt-ruby SUBDIR += rubygem-bcrypt_pbkdf SUBDIR += rubygem-devise-two-factor SUBDIR += rubygem-devise-two-factor-rails5 SUBDIR += rubygem-devise-two-factor30-rails52 SUBDIR += rubygem-devise_pam_authenticatable2 SUBDIR += rubygem-digest-crc SUBDIR += rubygem-doorkeeper SUBDIR += rubygem-doorkeeper-openid_connect SUBDIR += rubygem-doorkeeper-rails5 SUBDIR += rubygem-doorkeeper-rails50 SUBDIR += rubygem-doorkeeper43 SUBDIR += rubygem-ed25519 SUBDIR += rubygem-encryptor SUBDIR += rubygem-ezcrypto SUBDIR += rubygem-googleauth SUBDIR += rubygem-gpgme SUBDIR += rubygem-gpgr SUBDIR += rubygem-gssapi SUBDIR += rubygem-hkdf SUBDIR += rubygem-metasploit-aggregator SUBDIR += rubygem-metasploit-concern SUBDIR += rubygem-metasploit-credential SUBDIR += rubygem-metasploit-model SUBDIR += rubygem-metasploit-payloads SUBDIR += rubygem-metasploit_data_models SUBDIR += rubygem-metasploit_payloads-mettle SUBDIR += rubygem-nessus_rest SUBDIR += rubygem-net-scp SUBDIR += rubygem-net-sftp SUBDIR += rubygem-net-ssh SUBDIR += rubygem-net-ssh-gateway SUBDIR += rubygem-net-ssh-gateway1 SUBDIR += rubygem-net-ssh-multi SUBDIR += rubygem-net-ssh4 SUBDIR += rubygem-net-telnet SUBDIR += rubygem-nexpose SUBDIR += rubygem-nmap-parser SUBDIR += rubygem-omniauth SUBDIR += rubygem-omniauth-bitbucket SUBDIR += rubygem-omniauth-cas SUBDIR += rubygem-omniauth-cas3 SUBDIR += rubygem-omniauth-gitlab SUBDIR += rubygem-omniauth-jwt SUBDIR += rubygem-omniauth-multipassword SUBDIR += rubygem-omniauth-oauth2-generic SUBDIR += rubygem-omniauth-saml SUBDIR += rubygem-omniauth-shibboleth SUBDIR += rubygem-openssl SUBDIR += rubygem-openssl-ccm SUBDIR += rubygem-openvas-omp SUBDIR += rubygem-origami SUBDIR += rubygem-pbkdf2-ruby SUBDIR += rubygem-pundit SUBDIR += rubygem-pyu-ruby-sasl SUBDIR += rubygem-rack-oauth2 SUBDIR += rubygem-razorback-scriptNugget SUBDIR += rubygem-rbnacl SUBDIR += rubygem-rbnacl-libsodium SUBDIR += rubygem-recog SUBDIR += rubygem-rex-arch SUBDIR += rubygem-rex-bin_tools SUBDIR += rubygem-rex-core SUBDIR += rubygem-rex-encoder SUBDIR += rubygem-rex-exploitation SUBDIR += rubygem-rex-java SUBDIR += rubygem-rex-mime SUBDIR += rubygem-rex-nop SUBDIR += rubygem-rex-ole SUBDIR += rubygem-rex-powershell SUBDIR += rubygem-rex-random_identifier SUBDIR += rubygem-rex-registry SUBDIR += rubygem-rex-rop_builder SUBDIR += rubygem-rex-socket SUBDIR += rubygem-rex-sslscan SUBDIR += rubygem-rex-struct2 SUBDIR += rubygem-rex-text SUBDIR += rubygem-rex-zip SUBDIR += rubygem-roauth SUBDIR += rubygem-rpam2 SUBDIR += rubygem-ruby-hmac SUBDIR += rubygem-ruby-rc4 SUBDIR += rubygem-ruby-saml SUBDIR += rubygem-scrypt SUBDIR += rubygem-securecompare SUBDIR += rubygem-signet SUBDIR += rubygem-six SUBDIR += rubygem-sshkey SUBDIR += rubygem-sshkit SUBDIR += rubygem-timfel-krb5 SUBDIR += rubygem-twitter_oauth SUBDIR += rubygem-webpush SUBDIR += s2n SUBDIR += safesh SUBDIR += samhain SUBDIR += samhain-client SUBDIR += samhain-server SUBDIR += sancp SUBDIR += sandsifter SUBDIR += sasp SUBDIR += scamp SUBDIR += scanhill SUBDIR += scanlogd SUBDIR += scanssh SUBDIR += scrypt SUBDIR += seahorse SUBDIR += seal SUBDIR += seccure SUBDIR += secpanel SUBDIR += sectok SUBDIR += secure_delete SUBDIR += setaudit SUBDIR += sha SUBDIR += sha1collisiondetection SUBDIR += sha2wordlist SUBDIR += shibboleth-sp SUBDIR += shimmer SUBDIR += shishi SUBDIR += shttpscanner SUBDIR += sig2dot SUBDIR += signify SUBDIR += signing-party SUBDIR += silktools SUBDIR += sinfp SUBDIR += sks SUBDIR += slurpie SUBDIR += slush SUBDIR += smap SUBDIR += smtpscan SUBDIR += smurflog SUBDIR += sniff SUBDIR += snoopy SUBDIR += snort SUBDIR += snort-rep SUBDIR += snort2pfcd SUBDIR += snort3 SUBDIR += snortsam SUBDIR += snortsnarf SUBDIR += snuffleupagus SUBDIR += softether SUBDIR += softether-devel SUBDIR += softether5 SUBDIR += softhsm SUBDIR += softhsm2 SUBDIR += sops SUBDIR += spass SUBDIR += spass-qt5 SUBDIR += spike-proxy SUBDIR += spybye SUBDIR += sqlmap SUBDIR += sqlninja SUBDIR += srm SUBDIR += ssdeep SUBDIR += ssh-multiadd SUBDIR += ssh-vault SUBDIR += ssh_askpass_gtk2 SUBDIR += sshblock SUBDIR += sshguard SUBDIR += sshpass SUBDIR += ssl-admin SUBDIR += ssllabs-scan SUBDIR += sslproxy SUBDIR += sslscan SUBDIR += sslsniffer SUBDIR += sslsplit SUBDIR += sslwrap SUBDIR += sssd SUBDIR += ssss SUBDIR += sst SUBDIR += starttls SUBDIR += steghide SUBDIR += stoken SUBDIR += strobe SUBDIR += strongswan SUBDIR += stud SUBDIR += stunnel SUBDIR += subversion-gnome-keyring SUBDIR += subweb SUBDIR += sudo SUBDIR += sudoscript SUBDIR += super SUBDIR += suricata SUBDIR += suricata5 SUBDIR += swatch SUBDIR += switzerland SUBDIR += symbion-sslproxy SUBDIR += tclsasl SUBDIR += tcpcrypt SUBDIR += teleport SUBDIR += testssl.sh SUBDIR += theonionbox SUBDIR += tinc SUBDIR += tinc-devel SUBDIR += tinyca SUBDIR += titus SUBDIR += tls-check SUBDIR += tlswrap SUBDIR += tor SUBDIR += tor-devel SUBDIR += totp-cli SUBDIR += tpm-tools SUBDIR += tpm2-abrmd SUBDIR += tpm2-tools SUBDIR += tpm2-tss SUBDIR += trezord SUBDIR += trinokiller SUBDIR += tripwire SUBDIR += tripwire-131 SUBDIR += trousers SUBDIR += truecrypt SUBDIR += tsshbatch SUBDIR += tthsum SUBDIR += u2f-devd SUBDIR += umit SUBDIR += unhide SUBDIR += unicornscan SUBDIR += unssh SUBDIR += vanguards-tor SUBDIR += vault SUBDIR += veracrypt SUBDIR += vinetto SUBDIR += vlock SUBDIR += vm-to-tor SUBDIR += vnccrack SUBDIR += vpnc SUBDIR += vuls SUBDIR += vuxml SUBDIR += vxquery SUBDIR += w3af SUBDIR += wapiti SUBDIR += wazuh-agent SUBDIR += webfwlog SUBDIR += webscarab SUBDIR += whatweb SUBDIR += wipe SUBDIR += wolfssl SUBDIR += wpa_supplicant SUBDIR += xca SUBDIR += xinetd SUBDIR += xml-security SUBDIR += xmlsec1 SUBDIR += xorsearch SUBDIR += xspy SUBDIR += yafic SUBDIR += yapet SUBDIR += yara SUBDIR += yersinia SUBDIR += ykclient SUBDIR += ykpers SUBDIR += ylva SUBDIR += yubico-piv-tool SUBDIR += yubikey-manager-qt SUBDIR += yubikey-personalization-gui SUBDIR += yubioath-desktop SUBDIR += zebedee SUBDIR += zenmap SUBDIR += zeronet SUBDIR += zxid SUBDIR += zzuf .include Index: head/security/ktls_isa-l_crypto-kmod/Makefile =================================================================== --- head/security/ktls_isa-l_crypto-kmod/Makefile (nonexistent) +++ head/security/ktls_isa-l_crypto-kmod/Makefile (revision 513187) @@ -0,0 +1,40 @@ +# Created by: Michal Bielicki +# $FreeBSD$ + +PORTNAME= isa-l_crypto +PORTVERSION= 2.21.0 +DISTVERSIONPREFIX= v +CATEGORIES= security +PKGNAMEPREFIX= ktls_ +PKGNAMESUFFIX= -kmod + +MAINTAINER= gallatin@FreeBSD.org +COMMENT= KTLS module using Intel(R) ISA-L crypto + +LICENSE= BSD3CLAUSE +LICENSE_FILE= ${WRKSRC}/LICENSE + +ONLY_FOR_ARCHS= amd64 + +BUILD_DEPENDS= yasm:devel/yasm + +USES= kmod uidfix + +USE_GITHUB= yes +GH_ACCOUNT= 01org + +MAKE_ENV+= ISASRC=${WRKSRC} + +PLIST_FILES= ${KMODDIR}/ktls_intel-isa-l.ko + +.include + +.if !exists(${SRC_BASE}/sys/sys/ktls.h) +IGNORE= requires KTLS support +.endif + +post-extract: + ${CP} ${FILESDIR}/* ${WRKSRC}/ + ${ECHO} "#include " > ${WRKSRC}/include/stdint.h + +.include Property changes on: head/security/ktls_isa-l_crypto-kmod/Makefile ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:keywords ## -0,0 +1 ## +FreeBSD=%H \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/ktls_isa-l_crypto-kmod/distinfo =================================================================== --- head/security/ktls_isa-l_crypto-kmod/distinfo (nonexistent) +++ head/security/ktls_isa-l_crypto-kmod/distinfo (revision 513187) @@ -0,0 +1,3 @@ +TIMESTAMP = 1566856170 +SHA256 (01org-isa-l_crypto-v2.21.0_GH0.tar.gz) = 58284d7e5e60c37d6d4c1bbc2a876e95d14ca153443775a491f91c21a4243171 +SIZE (01org-isa-l_crypto-v2.21.0_GH0.tar.gz) = 502413 Property changes on: head/security/ktls_isa-l_crypto-kmod/distinfo ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +on \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/ktls_isa-l_crypto-kmod/files/Makefile =================================================================== --- head/security/ktls_isa-l_crypto-kmod/files/Makefile (nonexistent) +++ head/security/ktls_isa-l_crypto-kmod/files/Makefile (revision 513187) @@ -0,0 +1,64 @@ +# +# Copyright (c) 2016-2019 Netflix, Inc +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer, +# without modification. +# 2. Redistributions in binary form must reproduce at minimum a disclaimer +# similar to the "NO WARRANTY" disclaimer below ("Disclaimer") and any +# redistribution must be conditioned upon including a substantially +# similar Disclaimer requirement for further binary redistribution. +# +# NO WARRANTY +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF NONINFRINGEMENT, MERCHANTIBILITY +# AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL +# THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, +# OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS +# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER +# IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF +# THE POSSIBILITY OF SUCH DAMAGES. +# +# $FreeBSD$ +# + +ISAINC=${ISASRC}/include +ISAAES=${ISASRC}/aes +INCS=-I${ISAINC} -I${ISAAES} +CFLAGS+=${INCS} +YASM=${LOCALBASE}/bin/yasm + +.PATH: ${ISASRC}/aes +.SUFFIXES: .asm +.asm.o: + ${YASM} -g dwarf2 -f elf64 ${INCS} -o ${.TARGET} ${.IMPSRC} + +KMOD= ktls_intel-isa-l +SRCS= gcm128_avx_gen2.asm \ + gcm128_avx_gen4.asm \ + gcm128_sse.asm \ + gcm256_avx_gen2.asm \ + gcm256_avx_gen4.asm \ + gcm256_sse.asm \ + gcm_multibinary.asm \ + gcm128_avx_gen2_nt.asm \ + gcm128_avx_gen4_nt.asm \ + gcm128_sse_nt.asm \ + gcm256_avx_gen2_nt.asm \ + gcm256_avx_gen4_nt.asm \ + gcm256_sse_nt.asm \ + gcm_multibinary_nt.asm \ + keyexp_128.asm \ + keyexp_192.asm \ + keyexp_256.asm \ + keyexp_multibinary.asm \ + gcm_pre.c \ + intelisa_kern.c + +.include Property changes on: head/security/ktls_isa-l_crypto-kmod/files/Makefile ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:keywords ## -0,0 +1 ## +FreeBSD=%H \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/ktls_isa-l_crypto-kmod/files/intelisa_kern.c =================================================================== --- head/security/ktls_isa-l_crypto-kmod/files/intelisa_kern.c (nonexistent) +++ head/security/ktls_isa-l_crypto-kmod/files/intelisa_kern.c (revision 513187) @@ -0,0 +1,401 @@ +/*- + * SPDX-License-Identifier: BSD-2-Clause + * + * Copyright (c) 2014-2018 Netflix Inc. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + * + * + */ +#include +__FBSDID("$FreeBSD$"); + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "aes_gcm.h" + +#define KTLS_INTELISA_AEAD_TAGLEN 16 + +struct isa_gcm_struct { + struct gcm_key_data key_data; + struct gcm_context_data ctx_data; + void (*gcm_pre) (const void *key, struct gcm_key_data *); /* Done once per key */ + void (*gcm_init) (const struct gcm_key_data *key_data, + struct gcm_context_data *context_data, + uint8_t *iv, + uint8_t const *aad, + uint64_t aad_len); /* Done at start of crypt */ + void (*gcm_upd) (const struct gcm_key_data *key_data, + struct gcm_context_data *context_data, + uint8_t *out, + const uint8_t *in, + uint64_t len); /* With each block of data */ + void (*gcm_upd_nt) (const struct gcm_key_data *key_data, + struct gcm_context_data *context_data, + uint8_t *out, + const uint8_t *in, + uint64_t len); /* With each block of data */ + void (*gcm_final) (const struct gcm_key_data *key_data, + struct gcm_context_data *context_data, + uint8_t *tag, + uint64_t tag_len); /* Pulls out the tag */ +}; + +SYSCTL_DECL(_kern_ipc_tls); + +static int ktls_use_intel_isa_gcm = 1; +SYSCTL_INT(_kern_ipc_tls, OID_AUTO, isa_gcm, CTLFLAG_RW, + &ktls_use_intel_isa_gcm, 1, + "Should we use the Intel ISA GCM if available"); + +SYSCTL_DECL(_kern_ipc_tls_stats); + +static counter_u64_t ktls_offload_isa_aead; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_aead_crypts, + CTLFLAG_RD, &ktls_offload_isa_aead, + "Total number of Intel ISA TLS AEAD encrypts called"); + +static counter_u64_t ktls_offload_isa_tls_13; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_tls_13_crypts, + CTLFLAG_RD, &ktls_offload_isa_tls_13, + "Total number of Intel ISA TLS 1.3 encrypts called"); + +static counter_u64_t ktls_offload_isa_tls_12; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_tls_12_crypts, + CTLFLAG_RD, &ktls_offload_isa_tls_12, + "Total number of Intel ISA TLS 1.2 encrypts called"); + +static counter_u64_t intelisa_unaligned_mem_b; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_unaligned_bytes, + CTLFLAG_RD, &intelisa_unaligned_mem_b, + "Byte cnt of intel isa unaligned"); + +static counter_u64_t intelisa_aligned_mem_b; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_aligned_bytes, + CTLFLAG_RD, &intelisa_aligned_mem_b, + "Byte cnt of intel isa aligned"); + +static counter_u64_t intelisa_unaligned_mem; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_unaligned, + CTLFLAG_RD, &intelisa_unaligned_mem, + "Call cnt of intel isa unaligned"); + +static counter_u64_t intelisa_aligned_mem; +SYSCTL_COUNTER_U64(_kern_ipc_tls_stats, OID_AUTO, isa_aligned, + CTLFLAG_RD, &intelisa_aligned_mem, + "Call cnt of intel isa aligned"); + +static MALLOC_DEFINE(M_INTEL_ISA, "isal_tls", "Intel ISA-L TLS"); + +static int +intel_isa_seal(struct isa_gcm_struct *isa, + struct iovec *outiov, int numiovs, + uint8_t *static_iv, int iv_len, uint64_t seq, + struct iovec *iniov, + uint8_t * ad, int adlen, + uint8_t * tagout, size_t *taglen, + bool tls_13, uint8_t tls_13_rtype) +{ + int i; + bool nt = true; + bool misaligned_len, misaligned_start; + int fixup = 0; + size_t offset; + uint8_t *in; + uint8_t *out; + uint64_t len; + uint8_t iv[32]; + uint8_t seq_num[sizeof(seq)]; + + if (iv_len > 32 - sizeof(seq)) { + return (-1); + } + + if (tls_13) { + /* + * RFC 8446 5.3: left pad the 64b seqno + * with 0s, and xor with the IV + * + * gcm_init does not provde a way to specify the + * length of the iv, so we have hard-coded it to 12 in + * openssl + */ + memcpy(seq_num, &seq, sizeof(seq)); + + offset = iv_len - sizeof(seq); + memcpy(iv, static_iv, offset); + for (i = 0; i < sizeof(seq); i++) + iv[i + offset] = static_iv[i + offset] ^ seq_num[i]; + } else { + memcpy(iv, static_iv, iv_len); + memcpy(iv + iv_len, &seq, sizeof(seq)); + } + isa->gcm_init(&isa->key_data, &isa->ctx_data, iv, ad, (size_t)adlen); + for (i = 0; i < numiovs; i++) { + in = iniov[i].iov_base; + out = outiov[i].iov_base; + len = iniov[i].iov_len; + + misaligned_start = ((uintptr_t)in & 0xf) != 0; + misaligned_len = (len & 0xf) != 0; + + if (misaligned_start || misaligned_len) { + /* + * Try to do as much of a page using + * non-temporals as we possibly can, and leave + * a ragged tail as a separate chunk. + */ + if (nt && !misaligned_start && len > 0xf) { + len = len & ~0xf; + fixup = iniov[i].iov_len - len; + } else { + nt = false; + } + } +fixup_done: + if (nt) { + isa->gcm_upd_nt(&isa->key_data, &isa->ctx_data, out, in, len); + counter_u64_add(intelisa_aligned_mem, 1); + counter_u64_add(intelisa_aligned_mem_b, len); + } else { + isa->gcm_upd(&isa->key_data, &isa->ctx_data, out, in, len); + counter_u64_add(intelisa_unaligned_mem, 1); + counter_u64_add(intelisa_unaligned_mem_b, len); + } + if (fixup) { + in += len; + out += len; + len = fixup; + fixup = 0; + nt = false; + goto fixup_done; + } + } + if (tls_13) { + *tagout = tls_13_rtype; + isa->gcm_upd(&isa->key_data, &isa->ctx_data, tagout, + tagout, 1); + tagout += 1; + } + isa->gcm_final(&isa->key_data, &isa->ctx_data, tagout, *taglen); + return (0); +} + +static int +ktls_intelisa_aead_encrypt(struct ktls_session *tls, + const struct tls_record_layer *hdr, uint8_t *trailer, struct iovec *iniov, + struct iovec *outiov, int iovcnt, uint64_t seqno, uint8_t tls_rtype) +{ + struct isa_gcm_struct *isa; + struct tls_aead_data ad; + struct tls_nonce_data nd; + size_t adlen, taglen; + uint8_t *adptr; + int ret; + uint16_t tls_comp_len; + bool tls_13; + + isa = (struct isa_gcm_struct *)tls->cipher; + + KASSERT(isa != NULL, ("Null cipher")); + counter_u64_add(ktls_offload_isa_aead, 1); + taglen = KTLS_INTELISA_AEAD_TAGLEN; + + if (tls->params.tls_vminor == TLS_MINOR_VER_THREE) { + tls_13 = true; + counter_u64_add(ktls_offload_isa_tls_13, 1); + adlen = sizeof(ad) - sizeof(ad.seq); + adptr = &ad.type; + ad.tls_length = hdr->tls_length; + + } else { + tls_13 = false; + counter_u64_add(ktls_offload_isa_tls_12, 1); + tls_comp_len = ntohs(hdr->tls_length) - + (KTLS_INTELISA_AEAD_TAGLEN + sizeof(nd.seq)); + adlen = sizeof(ad); + adptr = (uint8_t *)&ad; + ad.tls_length = htons(tls_comp_len); + } + /* Setup the associated data */ + ad.seq = htobe64(seqno); + ad.type = hdr->tls_type; + ad.tls_vmajor = hdr->tls_vmajor; + ad.tls_vminor = hdr->tls_vminor; + + ret = intel_isa_seal(isa, outiov, iovcnt, + tls->params.iv, tls->params.iv_len, + htobe64(seqno), iniov, + adptr, adlen, trailer, &taglen, + tls_13, tls_rtype); + + return(ret); +} + + +static int +ktls_intelisa_setup_cipher(struct isa_gcm_struct *isa, uint8_t *key) +{ + struct fpu_kern_ctx *fpu_ctx; + + if (key == NULL) { + return (EINVAL); + } + fpu_ctx = fpu_kern_alloc_ctx(FPU_KERN_NOWAIT); + if (fpu_ctx == NULL) { + return (ENOMEM); + } + fpu_kern_enter(curthread, fpu_ctx, FPU_KERN_NORMAL); + isa->gcm_pre(key, &isa->key_data); + fpu_kern_leave(curthread, fpu_ctx); + fpu_kern_free_ctx(fpu_ctx); + return (0); +} + +static void +ktls_intelisa_free(struct ktls_session *tls) +{ + struct isa_gcm_struct *isa; + + isa = tls->cipher; + explicit_bzero(isa, sizeof(*isa)); + free(isa, M_INTEL_ISA); +} + +static int +ktls_intelisa_try(struct socket *so, struct ktls_session *tls) +{ + struct isa_gcm_struct *isa; + int error; + + if (ktls_use_intel_isa_gcm && + tls->params.cipher_algorithm == CRYPTO_AES_NIST_GCM_16) { + isa = malloc(sizeof (*isa), M_INTEL_ISA, M_NOWAIT | M_ZERO); + if (isa == NULL) { + return (ENOMEM); + } + switch (tls->params.cipher_key_len) { + case 16: + isa->gcm_pre = aes_gcm_pre_128; + isa->gcm_init = aes_gcm_init_128; + isa->gcm_upd = aes_gcm_enc_128_update; + isa->gcm_upd_nt = aes_gcm_enc_128_update_nt; + isa->gcm_final = aes_gcm_enc_128_finalize; + break; + case 32: + isa->gcm_pre = aes_gcm_pre_256; + isa->gcm_init = aes_gcm_init_256; + isa->gcm_upd = aes_gcm_enc_256_update; + isa->gcm_upd_nt = aes_gcm_enc_256_update_nt; + isa->gcm_final = aes_gcm_enc_256_finalize; + break; + default: + free(isa, M_INTEL_ISA); + return (EOPNOTSUPP); + } + + error = ktls_intelisa_setup_cipher(isa, tls->params.cipher_key); + if (error) { + free(isa, M_INTEL_ISA); + return (error); + } + + tls->cipher = isa; + tls->sw_encrypt = ktls_intelisa_aead_encrypt; + tls->free = ktls_intelisa_free; + return (0); + } + return (EOPNOTSUPP); +} + +struct ktls_crypto_backend intelisa_backend = { + .name = "Intel ISA-L", + .prio = 20, + .api_version = KTLS_API_VERSION, + .try = ktls_intelisa_try, +}; + +static int +intelisa_init(void) +{ + ktls_offload_isa_aead = counter_u64_alloc(M_WAITOK); + ktls_offload_isa_tls_12 = counter_u64_alloc(M_WAITOK); + ktls_offload_isa_tls_13 = counter_u64_alloc(M_WAITOK); + intelisa_aligned_mem = counter_u64_alloc(M_WAITOK); + intelisa_aligned_mem_b = counter_u64_alloc(M_WAITOK); + intelisa_unaligned_mem = counter_u64_alloc(M_WAITOK); + intelisa_unaligned_mem_b = counter_u64_alloc(M_WAITOK); + return (ktls_crypto_backend_register(&intelisa_backend)); +} + +static int +intelisa_unload(void) +{ + int error; + + error = ktls_crypto_backend_deregister(&intelisa_backend); + if (error) + return (error); + counter_u64_free(ktls_offload_isa_aead); + counter_u64_free(intelisa_aligned_mem); + counter_u64_free(intelisa_aligned_mem_b); + counter_u64_free(intelisa_unaligned_mem); + counter_u64_free(intelisa_unaligned_mem_b); + return (0); +} + +static int +intelisa_module_event_handler(module_t mod, int evt, void *arg) +{ + switch (evt) { + case MOD_LOAD: + return (intelisa_init()); + case MOD_UNLOAD: + return (intelisa_unload()); + default: + return (EOPNOTSUPP); + } +} + +static moduledata_t intelisa_moduledata = { + "intelisa", + intelisa_module_event_handler, + NULL +}; + +DECLARE_MODULE(intelisa, intelisa_moduledata, SI_SUB_PROTO_END, SI_ORDER_ANY); Property changes on: head/security/ktls_isa-l_crypto-kmod/files/intelisa_kern.c ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:keywords ## -0,0 +1 ## +FreeBSD=%H \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/ktls_isa-l_crypto-kmod/pkg-descr =================================================================== --- head/security/ktls_isa-l_crypto-kmod/pkg-descr (nonexistent) +++ head/security/ktls_isa-l_crypto-kmod/pkg-descr (revision 513187) @@ -0,0 +1,8 @@ +ISA-L crypto is a collection of optimized low-level functions targeting +cryptography applications. + +This port provides a software encryption module for in-kernel TLS +(KTLS) that uses routines in the ISA-L crypto library to encrypt TLS +records. + +WWW: https://github.com/01org/isa-l_crypto Property changes on: head/security/ktls_isa-l_crypto-kmod/pkg-descr ___________________________________________________________________ Added: fbsd:nokeywords ## -0,0 +1 ## +on \ No newline at end of property Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property