| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
|
| |
be used to implement overlay networks and more flexible road-warrior
support.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
idea is to support various cryptographic hardware accelerators (which
may be (detachable) cards, secondary/tertiary/etc processors,
software crypto, etc). Supports session migration between crypto
devices. What it doesn't (yet) support:
- multiple instances of the same algorithm used in the same session
- use of multiple crypto drivers in the same session
- asymmetric crypto
No support for a userland device yet.
IPsec code path modified to allow for asynchronous cryptography
(callbacks used in both input and output processing). Some unrelated
code simplification done in the process (especially for AH).
Development of this code kindly supported by Network Security
Technologies (NSTI). The code was writen mostly in Greece, and is
being committed from Montreal.
|
| |
|
|
|
|
|
|
|
| |
Well, on the amiga, setsoftnet *REQUIRES* machine/cpu.h to work...
and no include mentioned in those files pulls machine/cpu.h...
Nit-fix: / * INET6 */ -> /* INET6 */
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
the bridge).
|
|
|
|
| |
by art@
|
| |
|
| |
|
|
|
|
| |
as receiving interface for filtering
|
| |
|
|
|
|
| |
bpf via the enc0 interface, using linktype DLT_ENC.
|
|
|
|
|
|
|
| |
draft-mcdonald-simple-ipsec-api, kernel notifies (EMT_REQUESTSA) signal
userland key management applications when security services are requested.
this is only for outgoing connections at the moment, incoming packets
are not yet checked against the selected socket policy.
|
|
|
|
| |
encryption. some more info for kernfs/ipsec.
|
|
|
|
| |
generalised way of handling transforms.
|
| |
|
| |
|
| |
|
|
Greece. From ftp.funet.fi:/pub/unix/security/net/ip/BSDipsec.tar.gz
|