John Baldwin 64c043d2d2 crypto: Support Chacha20-Poly1305 with a nonce size of 8 bytes. ... This is useful for WireGuard which uses a nonce of 8 bytes rather than the 12 bytes used for IPsec and TLS. Note that this also fixes a (should be) harmless bug in ossl(4) where the counter was incorrectly treated as a 64-bit counter instead of a 32-bit counter in terms of wrapping when using a 12 byte nonce. However, this required a single message (TLS record) longer than 64 * (2^32 - 1) bytes (about 256 GB) to trigger. Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D32122 (cherry picked from commit 42dcd39528)		2021-10-21 14:19:30 -07:00
..
_cryptodev.h	OpenCrypto: Convert sessions to opaque handles instead of integers	2018-07-18 00:56:25 +00:00
cbc_mac.c	cryptosoft: Fix support for variable tag lengths in AES-CCM.	2021-10-21 14:19:04 -07:00
cbc_mac.h	cryptosoft: Fix support for variable tag lengths in AES-CCM.	2021-10-21 14:19:04 -07:00
criov.c	crypto: Add crypto_cursor_segment() to fetch both base and length.	2021-10-21 08:51:26 -07:00
crypto.c	crypto: Support Chacha20-Poly1305 with a nonce size of 8 bytes.	2021-10-21 14:19:30 -07:00
cryptodeflate.c	Replace some K&R function definitions with ANSI C.	2020-11-03 22:32:30 +00:00
cryptodev.c	cryptodev: Allow some CIOCCRYPT operations with an empty payload.	2021-10-21 14:07:18 -07:00
cryptodev.h	crypto: Support multiple nonce lengths for AES-CCM.	2021-10-21 14:07:36 -07:00
cryptodev_if.m	Fix a typo in a comment: frame -> framework.	2021-04-26 12:01:37 -07:00
cryptosoft.c	crypto: Support Chacha20-Poly1305 with a nonce size of 8 bytes.	2021-10-21 14:19:30 -07:00
deflate.h	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
gfmult.c
gfmult.h
gmac.c	Adjust crypto_apply function callbacks for OCF.	2020-06-10 21:18:19 +00:00
gmac.h	Adjust crypto_apply function callbacks for OCF.	2020-06-10 21:18:19 +00:00
ktls_ocf.c	ktls: Use COUNTER_U64_DEFINE_EARLY	2021-02-15 14:13:28 -05:00
rmd160.c	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
rmd160.h	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
xform.c	Remove MD5 HMAC from OCF.	2020-05-11 22:08:08 +00:00
xform.h	Remove MD5 HMAC from OCF.	2020-05-11 22:08:08 +00:00
xform_aes_icm.c	crypto: Support multiple nonce lengths for AES-CCM.	2021-10-21 14:07:36 -07:00
xform_aes_xts.c	crypto: Permit variable-sized IVs for ciphers with a reinit hook.	2021-10-21 13:47:58 -07:00
xform_auth.h	Add an implementation of CHACHA20_POLY1305 to cryptosoft.	2021-10-21 08:51:22 -07:00
xform_cbc_mac.c	Adjust crypto_apply function callbacks for OCF.	2020-06-10 21:18:19 +00:00
xform_chacha20_poly1305.c	crypto: Support Chacha20-Poly1305 with a nonce size of 8 bytes.	2021-10-21 14:19:30 -07:00
xform_cml.c	Various cleanups to the software encryption transform interface.	2020-05-20 21:21:01 +00:00
xform_comp.h	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
xform_deflate.c	Replace some K&R function definitions with ANSI C.	2020-11-03 22:32:30 +00:00
xform_enc.h	crypto: Permit variable-sized IVs for ciphers with a reinit hook.	2021-10-21 13:47:58 -07:00
xform_gmac.c	Adjust crypto_apply function callbacks for OCF.	2020-06-10 21:18:19 +00:00
xform_null.c	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
xform_poly1305.c	poly1305: Don't export generic Poly1305_* symbols from xform_poly1305.c.	2021-10-21 08:51:24 -07:00
xform_rijndael.c	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
xform_rmd160.c	Adjust crypto_apply function callbacks for OCF.	2020-06-10 21:18:19 +00:00
xform_sha1.c	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00
xform_sha2.c	Consistently use C99 fixed-width types in the in-kernel crypto code.	2020-11-03 22:27:54 +00:00