| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2019-09-30 | remove the "copy function" argument to bpf_mtap_hdr. |   dlg | 1 | -2/+2 |
| 2018-08-28 | Add per-TDB counters and a new SADB extension to export them to |   mpi | 1 | -3/+6 |
| 2018-07-12 | Introduce ipsec_output_cb() to merge duplicate code and account for | mpi | 1 | -57/+9 |
| 2018-07-11 | Convert AH & IPcomp to ipsec_input_cb() and count drops on input. | mpi | 1 | -2/+2 |
| 2018-07-10 | Introduce new IPsec (per-CPU) statistics and refactor ESP input | mpi | 1 | -47/+8 |
| 2018-05-09 | Cleanup IPsec ESP error handling with consistent goto drop. |   bluhm | 1 | -84/+79 |
| 2018-05-02 | Do not assume that mbufs within a chain do not have M_PKTHDR set. | bluhm | 1 | -7/+20 |
| 2017-11-08 | Make {ah,esp,ipcomp}stat use percpu counters. |   visa | 1 | -36/+34 |
| 2017-11-06 | Use %s and __func__ in DPRINTF() to reduce false positive with grep(1). | mpi | 1 | -49/+48 |
| 2017-08-11 | Remove NET_LOCK()'s argument. | mpi | 1 | -14/+13 |
| 2017-05-30 | add sizes to free() calls |   deraadt | 1 | -3/+3 |
| 2017-05-02 | Switch OCF and IPsec over to the new AES |   mikeb | 1 | -2/+2 |
| 2017-04-06 | Convert bcopy to memcpy where the memory does not overlap, otherwise, |   dhill | 1 | -6/+7 |
| 2017-02-07 | IPsec packets could be dropped unaccounted if output after crypto | bluhm | 1 | -3/+3 |
| 2017-02-07 | Reduce the per-packet allocation costs for crypto operations (cryptop) |   patrick | 1 | -7/+7 |
| 2017-02-07 | The return code of crp_callback is never checked, so it is not | bluhm | 1 | -31/+21 |
| 2017-01-09 | Grab the NET_LOCK() in various callbacks. | mpi | 1 | -8/+8 |
| 2016-12-24 | Grab the NET_LOCK() before calling ipsp_process_done() as it ends up | mpi | 1 | -5/+5 |
| 2016-09-19 | convert bcopy to memcpy. from david hill. |   tedu | 1 | -8/+8 |
| 2016-09-13 | avoid extensive mbuf allocation for IPsec by replacing m_inject(4) |   markus | 1 | -8/+9 |
| 2016-08-18 | fix panics caused by replacing m_copym2 with m_dup_pkt. | dlg | 1 | -14/+6 |
| 2016-08-15 | replace the last uses of m_copym2 with m_dup_pkt. | dlg | 1 | -2/+2 |
| 2016-03-07 | Sync no-argument function declaration and definition by adding (void). |   naddy | 1 | -2/+2 |
| 2015-12-09 | Remove plain DES encryption from IPsec. | naddy | 1 | -5/+1 |
| 2015-11-03 | Plumb Chacha20-Poly1305 into the IPsec/ESP and PF_KEY frameworks | mikeb | 1 | -3/+19 |
| 2015-07-15 | m_freem() can handle NULL, do not check for this condition beforehands. | deraadt | 1 | -5/+3 |
| 2015-06-15 | No need for an extra local variable; no functional change. | mikeb | 1 | -11/+9 |
| 2015-06-15 | Use proper argument type for crp_callback functions; no functional change. | mikeb | 1 | -15/+11 |
| 2015-04-17 | Stubs and support code for NIC-enabled IPsec bite the dust. | mikeb | 1 | -56/+20 |
| 2015-04-14 | make ipsp_address thread safe; ok mpi | mikeb | 1 | -33/+74 |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | tedu | 1 | -8/+1 |
| 2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | mpi | 1 | -1/+2 |
| 2014-11-18 | move arc4random prototype to systm.h. more appropriate for most code | tedu | 1 | -3/+1 |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | mpi | 1 | -2/+1 |
| 2014-07-12 | add a size argument to free. will be used soon, but for now default to 0. | tedu | 1 | -12/+12 |
| 2014-07-09 | bpf code surgery / shuffling / simplification. |   henning | 1 | -2/+2 |
| 2014-01-09 | bzero/bcmp -> memset/memcmp. ok matthew | tedu | 1 | -8/+8 |
| 2013-04-11 | Remove the extern keyword from function declarations, document | mpi | 1 | -1/+4 |
| 2013-02-14 | Merge of an original work by markus@ and gerhard@ to increase | mikeb | 1 | -52/+43 |
| 2012-10-18 | simplify checkreplaywindow() API; make call/return code handling consistent | markus | 1 | -22/+44 |
| 2012-09-20 | spltdb() was really just #define'd to be splsoftnet(); replace the former |   blambert | 1 | -3/+3 |
| 2012-09-18 | remove the SADB_X_SAFLAGS_{HALFIV,RANDOMPADDING,NOREPLAY} pfkey-API (not set | markus | 1 | -82/+25 |
| 2012-06-29 | Add support for the Extended (64-bit) Sequence Number as defined | mikeb | 1 | -45/+137 |
| 2011-01-11 | for key material that is being being discarded, convert bzero() to | deraadt | 1 | -3/+3 |
| 2010-12-21 | don't leak mbuf if padding failes; ok mikeb@ | markus | 1 | -1/+2 |
| 2010-10-06 | Retire Skipjack | mikeb | 1 | -5/+1 |
| 2010-09-23 | remove m_pad in favor of m_inject as it's equivalent to m_inject | mikeb | 1 | -77/+5 |
| 2010-09-22 | Support for AES-GCM-16 and ENCR_NULL_AUTH_AES_GMAC in ESP as per | mikeb | 1 | -9/+61 |
| 2010-07-20 | Switch some obvious network stack MAC comparisons from bcmp() to |   matthew | 1 | -2/+2 |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. |   reyk | 1 | -5/+8 |
