| Commit message (Expand) | Author | Age | Files | Lines |
* | MFC r304572 (by bz): | ae | 2017-03-18 | 1 | -193/+130 |
* | Use explicitly specified ivsize instead of blocksize when we mean IV size. | ae | 2015-11-16 | 1 | -7/+1 |
* | Take extra reference to security policy before calling crypto_dispatch(). | ae | 2015-09-30 | 1 | -0/+1 |
* | Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec | jmg | 2015-08-04 | 1 | -81/+89 |
* | these are comparing authenticators and need to be constant time... | jmg | 2015-07-31 | 1 | -1/+1 |
* | Clean up this header file... | jmg | 2015-07-31 | 1 | -2/+0 |
* | RFC4868 section 2.3 requires that the output be half... This fixes | jmg | 2015-07-29 | 1 | -24/+6 |
* | Summary: Fix LINT build. The names of the new AES modes were not | gnn | 2015-07-10 | 1 | -3/+3 |
* | Add support for AES modes to IPSec. These modes work both in software only | gnn | 2015-07-09 | 1 | -48/+89 |
* | Fix possible use after free due to security policy deletion. | ae | 2015-04-27 | 1 | -2/+5 |
* | Change ipsec_address() and ipsec_logsastr() functions to take two | ae | 2015-04-18 | 1 | -29/+30 |
* | Remove now unused mtag argument from ipsec*_common_input_cb. | ae | 2014-12-11 | 1 | -2/+2 |
* | Remove code related to PACKET_TAG_IPSEC_IN_CRYPTO_DONE mbuf tag. | ae | 2014-12-11 | 1 | -72/+34 |
* | Remove route chaching support from ipsec code. It isn't used for some time. | ae | 2014-12-02 | 1 | -1/+0 |
* | Remove SYSCTL_VNET_* macros, and simply put CTLFLAG_VNET where needed. | glebius | 2014-11-07 | 1 | -2/+2 |
* | Provide includes that are needed in these files, and before were read | glebius | 2013-10-26 | 1 | -0/+2 |
* | Migrate structs ahstat, espstat, ipcompstat, ipipstat, pfkeystat, | ae | 2013-07-09 | 1 | -3/+9 |
* | Use corresponding macros to update statistics for AH, ESP, IPIP, IPCOMP, | ae | 2013-06-20 | 1 | -28/+28 |
* | Remove unused 'plen' variable. | pjd | 2011-11-26 | 1 | -2/+1 |
* | The esp_max_ivlen global variable is not needed, we can just use | pjd | 2011-11-26 | 1 | -16/+1 |
* | malloc(M_WAITOK) never fails, so there is no need to check for NULL. | pjd | 2011-11-26 | 1 | -4/+0 |
* | Eliminate 'err' variable and just use existing 'error'. | pjd | 2011-11-26 | 1 | -3/+3 |
* | Simplify code a bit. | pjd | 2011-11-26 | 1 | -6/+3 |
* | There is no need to virtualize esp_max_ivlen. | pjd | 2011-11-26 | 1 | -6/+5 |
* | Make IPsec compile without INET adding appropriate #ifdef checks. | bz | 2011-04-27 | 1 | -14/+15 |
* | Optimisation in IPSEC(4): | fabient | 2011-03-31 | 1 | -15/+9 |
* | Fixed IPsec's HMAC_SHA256-512 support to be RFC4868 compliant. | vanhu | 2011-02-18 | 1 | -10/+53 |
* | After some off-list discussion, revert a number of changes to the | dim | 2010-11-22 | 1 | -1/+1 |
* | Apply the STATIC_VNET_DEFINE and STATIC_DPCPU_DEFINE macros throughout | dim | 2010-11-14 | 1 | -1/+1 |
* | MFP4: @176978-176982, 176984, 176990-176994, 177441 | bz | 2010-04-29 | 1 | -2/+1 |
* | Changed an IPSEC_ASSERT to a simple test, as such invalid packets | vanhu | 2009-10-01 | 1 | -3/+9 |
* | Merge the remainder of kern_vimage.c and vimage.h into vnet.c and | rwatson | 2009-08-01 | 1 | -1/+0 |
* | Remove unused VNET_SET() and related macros; only VNET_GET() is | rwatson | 2009-07-16 | 1 | -1/+1 |
* | Build on Jeff Roberson's linker-set based dynamic per-CPU allocator | rwatson | 2009-07-14 | 1 | -44/+13 |
* | Introduce vnet module registration / initialization framework with | zec | 2009-04-11 | 1 | -0/+13 |
* | First pass at separating per-vnet initializer functions | zec | 2009-04-06 | 1 | -3/+14 |
* | Change the initialization methodology for global variables scheduled | zec | 2008-11-19 | 1 | -3/+6 |
* | Step 1.5 of importing the network stack virtualization infrastructure | zec | 2008-10-02 | 1 | -4/+10 |
* | Commit step 1 of the vimage project, (network stack) | bz | 2008-08-17 | 1 | -37/+38 |
* | In addition to the ipsec_osdep.h removal a week ago, now also eliminate | bz | 2008-05-24 | 1 | -4/+0 |
* | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -10/+0 |
* | Integrate the Camellia Block Cipher. For more information see RFC 4132 | gnn | 2007-05-09 | 1 | -0/+3 |
* | - The authsize field from auth_hash structure was removed. | pjd | 2006-05-17 | 1 | -4/+4 |
* | Hide net.inet.ipsec.test_{replay,integrity} sysctls under #ifdef REGRESSION. | pjd | 2006-04-10 | 1 | -0/+4 |
* | Introduce two new sysctls: | pjd | 2006-04-09 | 1 | -1/+22 |
* | Be consistent with the rest of the code. | pjd | 2006-04-09 | 1 | -1/+1 |
* | First steps towards IPSec cleanup. | gnn | 2006-03-25 | 1 | -6/+6 |
* | Allow to use fast_ipsec(4) on debug.mpsafenet=0 and INVARIANTS-enabled | pjd | 2006-03-23 | 1 | -3/+14 |
* | Add missing code needed for the detection of IPSec packet replays. [1] | cperciva | 2006-03-22 | 1 | -0/+17 |
* | promote fast ipsec's m_clone routine for public use; it is renamed | sam | 2006-03-15 | 1 | -1/+1 |