wireguard-openbsd/sys/netinet/ip_esp.h, branch jd/simplify-queueing WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/sys/netinet/ip_esp.h?h=jd%2Fsimplify-queueing 2017-11-08T16:29:20Z Make {ah,esp,ipcomp}stat use percpu counters. 2017-11-08T16:29:20Z visa visa@openbsd.org 2017-11-08T16:29:20Z urn:sha1:6460338bf79df51c10552c84e50b189f0d9711e4 OK bluhm@, mpi@ Convert all the fields of {ah,esp,ipcomp}stat to uint64. 2017-11-07T16:51:23Z visa visa@openbsd.org 2017-11-07T16:51:23Z urn:sha1:56b63e1c0470fca8f47d1937a90f3402a2527fb3 This is a preliminary step for using percpu counters with the data. OK mpi@ IPsec packets could be dropped unaccounted if output after crypto 2017-02-07T18:18:16Z bluhm bluhm@openbsd.org 2017-02-07T18:18:16Z urn:sha1:8092cf70ca617dbebfffcc059b48ca6d36c644d4 failed. Add a counter for that case. OK dhill@ Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and add 2016-09-02T09:39:32Z vgross vgross@openbsd.org 2016-09-02T09:39:32Z urn:sha1:220db2a09610ff661ff9aad8727d1bfd050edda2 the relevant counters. Ok mikeb@ Fix two bugs in IPsec/HMAC-SHA2: 2010-01-10T12:43:07Z markus markus@openbsd.org 2010-01-10T12:43:07Z urn:sha1:8688c78ccb8ab5d1176894bf5ae336f3ec0d0d0c (1) use correct (message) block size of 128 byte (instead of 64 bytes) for HMAC-SHA512/384 (RFC4634). (2) RFC4868 specifies that HMAC-SHA-{256,384,512} is truncated to nnn/2 bits, while we still use 96 bits. 96 bits have been specified in draft-ietf-ipsec-ciph-sha-256-00 while draft-ietf-ipsec-ciph-sha-256-01 changed it to 128 bits. WARNING: this change makes IPsec with SHA-256 (the default) incompatible with older OpenBSD versions and other IPsec-implementations that share this bug. ok+tests naddy, fries; requested by reyk/deraadt add sysctl entry points into various network layers, in particular to 2007-12-14T18:33:37Z deraadt deraadt@openbsd.org 2007-12-14T18:33:37Z urn:sha1:ab46c28df9dade40ac2a7e07eff58829ad435982 provide netstat(1) with data it needs; ok claudio reyk switch to sysctl_int_arr(); ok henning, deraadt 2004-02-17T12:07:45Z markus markus@openbsd.org 2004-02-17T12:07:45Z urn:sha1:9060eb962488049c6e1eaa5f62bc2c1bb1b8505c UDP encapsulation for ESP in transport mode (draft-ietf-ipsec-udp-encaps-XX.txt) 2003-12-02T23:16:28Z markus markus@openbsd.org 2003-12-02T23:16:28Z urn:sha1:ed4bea918660fb0a9e5e49ccec72879cd9a917f7 ok deraadt@ Remove commons; inspired by netbsd. 2003-02-12T14:41:07Z jason jason@openbsd.org 2003-02-12T14:41:07Z urn:sha1:0c4981b0356faeb2095f083671123fe6d374f05a whitespace 2002-06-09T16:26:10Z itojun itojun@openbsd.org 2002-06-09T16:26:10Z urn:sha1:3e3142117c97ffbdd731c34f7ae6eb29b2dc42e7