wireguard-openbsd/sys/crypto/xform.h, branch jd/simplify-queueing WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/sys/crypto/xform.h?h=jd%2Fsimplify-queueing 2018-04-09T04:34:56Z Move some AES-related defines into xform.h to reduce duplication. 2018-04-09T04:34:56Z visa visa@openbsd.org 2018-04-09T04:34:56Z urn:sha1:cccf9383866a19f6ac9e5723e7290bcd7b2d6d6e gmac.c is left untouched for now to preserve layering. OK mikeb@, deraadt@ Switch OCF and IPsec over to the new AES 2017-05-02T11:44:32Z mikeb mikeb@openbsd.org 2017-05-02T11:44:32Z urn:sha1:d223d7cb85c1f2f705da547a0134b949655abe6a ok djm Remove plain DES from the kernel crypto framework, including the crypto 2015-12-10T21:00:51Z naddy naddy@openbsd.org 2015-12-10T21:00:51Z urn:sha1:e033ba55e730d840a2aa6627955e82a9152b011c accelerator drivers. No longer used by anything. ok sthen@ mikeb@ remove unused ARC4 support; ok mikeb@ 2015-11-13T15:29:55Z naddy naddy@openbsd.org 2015-11-13T15:29:55Z urn:sha1:37ff34b8235f9df6ad14edfce06bc1bec158e5d3 Remove unused non HMAC versions of MD5 and SHA1; ok mpi, deraadt, naddy 2015-11-13T12:21:16Z mikeb mikeb@openbsd.org 2015-11-13T12:21:16Z urn:sha1:896d9fa5764655fa33957e21429c670efde74133 Hook up Chacha20-Poly1305 to the OpenBSD Cryptographic Framework 2015-11-03T01:31:36Z mikeb mikeb@openbsd.org 2015-11-03T01:31:36Z urn:sha1:934c4a9c9c6b9e0fb3633896effbd60f6c0cebfd ok naddy, jsing remove KPDK. not really used, and a bad choice anyway. ok naddy 2014-12-28T10:02:37Z tedu tedu@openbsd.org 2014-12-28T10:02:37Z urn:sha1:ee4897801bca18757b2be11aeafcdee2a1fcb0c0 Allocate and deallocate memory for encryption contexts within cryptosoft, 2013-08-25T14:26:56Z jsing jsing@openbsd.org 2013-08-25T14:26:56Z urn:sha1:2dbd8e13008692ff92b9560da7b770daf2889930 rather than requiring each algorithm to provide their own memory handling. This matches the interface already provided by cryptosoft for authentication algorithms and removes the need for zerokey functions. ok mikeb@ Retire Skipjack 2010-10-06T22:19:20Z mikeb mikeb@openbsd.org 2010-10-06T22:19:20Z urn:sha1:9e43f3a02c1f77b34943037a8cc97bbc99e07d4a There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts. OCF support for the Galois/Counter Mode (GCM) for AES as 2010-09-22T11:54:23Z mikeb mikeb@openbsd.org 2010-09-22T11:54:23Z urn:sha1:112808b6ee76dc5b96194401fae4a712ecf06f7e described in FIPS SP 800-38D. This implementation supports 16 byte authentication tag only, splitting transformation into two parts: encryption and authentication. Encryption is handled by the existing AES-CTR implementation, while authentication requires new AES_GMAC hash function. Additional routine is added to the software crypto driver to deal with peculiarities of a combined authentication- encryption transformation. With suggestions from reyk, naddy and toby.