upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-14 01:59:44 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/sys/opencrypto
History
John Baldwin 107daeb474 ktls_ocf: Reject encrypted TLS records using AEAD that are too small. 
If a TLS record is too small to contain the required explicit IV,
record_type (TLS 1.3), and MAC, reject attempts to decrypt it with
EMSGSIZE without submitting it to OCF.  OCF drivers may not properly
detect that regions in the crypto request are outside the bounds of
the mbuf chain.  The caller isn't supposed to submit such requests.

Reviewed by:	markj
Sponsored by:	Chelsio Communications
Differential Revision:	https://reviews.freebsd.org/D37372

(cherry picked from commit 4e47414648)
2023-01-23 21:08:09 -08:00
..
_cryptodev.h OpenCrypto: Convert sessions to opaque handles instead of integers 2018-07-18 00:56:25 +00:00
cbc_mac.c cryptosoft: Fix support for variable tag lengths in AES-CCM. 2021-10-21 14:19:04 -07:00
cbc_mac.h cryptosoft: Fix support for variable tag lengths in AES-CCM. 2021-10-21 14:19:04 -07:00
criov.c opencrypto: mark INVARIANTS variables as __diagused 2022-08-28 21:03:48 -04:00
crypto.c crypto: Validate return values from CRYPTODEV_PROCESS() 2022-07-15 12:33:49 -04:00
cryptodeflate.c Replace some K&R function definitions with ANSI C. 2020-11-03 22:32:30 +00:00
cryptodev.c cryptodev: Use a private malloc type (M_CRYPTODEV) instead of M_XDATA. 2022-05-10 16:46:49 -07:00
cryptodev.h OCF: Add crypto_clonereq(). 2022-04-29 15:41:27 -07:00
cryptodev_if.m Fix a typo in a comment: frame -> framework. 2021-04-26 12:01:37 -07:00
cryptosoft.c cryptosoft: Reject AES-CCM/GCM sessions with invalid key lengths. 2022-04-29 13:50:04 -07:00
deflate.h Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
gfmult.c Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2022-02-08 15:00:55 -05:00
gfmult.h Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2022-02-08 15:00:55 -05:00
gmac.c GMAC: Reset initial hash value and counter in AES_GMAC_Reinit(). 2022-04-29 13:50:04 -07:00
gmac.h Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2022-02-08 15:00:55 -05:00
ktls_ocf.c ktls_ocf: Reject encrypted TLS records using AEAD that are too small. 2023-01-23 21:08:09 -08:00
rmd160.c Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
rmd160.h Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
xform.c Remove MD5 HMAC from OCF. 2020-05-11 22:08:08 +00:00
xform.h Remove MD5 HMAC from OCF. 2020-05-11 22:08:08 +00:00
xform_aes_icm.c crypto: Support multiple nonce lengths for AES-CCM. 2021-10-21 14:07:36 -07:00
xform_aes_xts.c crypto: Permit variable-sized IVs for ciphers with a reinit hook. 2021-10-21 13:47:58 -07:00
xform_auth.h Add an implementation of CHACHA20_POLY1305 to cryptosoft. 2021-10-21 08:51:22 -07:00
xform_cbc_mac.c Adjust crypto_apply function callbacks for OCF. 2020-06-10 21:18:19 +00:00
xform_chacha20_poly1305.c crypto: Don't assert on valid IV length for Chacha20-Poly1305. 2021-11-23 15:11:34 -08:00
xform_cml.c Various cleanups to the software encryption transform interface. 2020-05-20 21:21:01 +00:00
xform_comp.h Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
xform_deflate.c Replace some K&R function definitions with ANSI C. 2020-11-03 22:32:30 +00:00
xform_enc.h crypto: Permit variable-sized IVs for ciphers with a reinit hook. 2021-10-21 13:47:58 -07:00
xform_gmac.c Adjust crypto_apply function callbacks for OCF. 2020-06-10 21:18:19 +00:00
xform_null.c crypto: Fix the NULL_HMAC finalizer 2022-07-07 20:47:03 -04:00
xform_poly1305.c crypto: Define POLY1305_BLOCK_LEN constant. 2022-04-29 14:09:17 -07:00
xform_rijndael.c Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
xform_rmd160.c Adjust crypto_apply function callbacks for OCF. 2020-06-10 21:18:19 +00:00
xform_sha1.c Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00
xform_sha2.c Consistently use C99 fixed-width types in the in-kernel crypto code. 2020-11-03 22:27:54 +00:00