wireguard-openbsd/sys/crypto/gmac.c, branch jd/simplify-queueing

Switch OCF and IPsec over to the new AES

2017-05-02T11:44:32Z

ok djm

convert bcopy to memcpy. from david hill

2016-09-19T18:09:40Z

Update copyright information

2015-11-07T17:46:49Z

Pass AES_GMAC context as a void pointer to cut down on casts in xform.c

2015-11-07T17:46:07Z

Allow overriding ghash_update() with an optimized MD function. Use

2015-11-07T01:37:26Z

this on amd64 to provide a version that uses the PCLMUL instruction on CPUs that support it but don't have AESNI. ok mikeb@

Instead of multiplying with 0..1, extend the bit into a mask and do an AND.

2015-11-06T16:43:51Z

The same technique was already used a few lines above. ok mikeb@

Improve performance of an internal loop by saving up on branching

2014-11-12T17:52:02Z

Pointed out by John-Mark Gurney , thanks!

in AES_GMAC_Final(), explicitly clear the local buffer

2011-01-11T15:44:23Z

ok mikeb

use a well established define instead of rolling our own; no binary change

2010-11-08T10:27:50Z

OCF support for the Galois/Counter Mode (GCM) for AES as

2010-09-22T11:54:23Z

described in FIPS SP 800-38D. This implementation supports 16 byte authentication tag only, splitting transformation into two parts: encryption and authentication. Encryption is handled by the existing AES-CTR implementation, while authentication requires new AES_GMAC hash function. Additional routine is added to the software crypto driver to deal with peculiarities of a combined authentication- encryption transformation. With suggestions from reyk, naddy and toby.