mirror of
https://github.com/opnsense/src.git
synced 2026-05-20 08:56:47 -04:00
This is useful for WireGuard which uses a nonce of 8 bytes rather
than the 12 bytes used for IPsec and TLS.
Note that this also fixes a (should be) harmless bug in ossl(4) where
the counter was incorrectly treated as a 64-bit counter instead of a
32-bit counter in terms of wrapping when using a 12 byte nonce.
However, this required a single message (TLS record) longer than 64 *
(2^32 - 1) bytes (about 256 GB) to trigger.
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D32122
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| aesni | ||
| armv8 | ||
| blake2 | ||
| camellia | ||
| ccp | ||
| chacha20 | ||
| des | ||
| libsodium | ||
| openssl | ||
| rc4 | ||
| rijndael | ||
| sha2 | ||
| siphash | ||
| skein | ||
| via | ||
| intake.h | ||
| sha1.c | ||
| sha1.h | ||