summaryrefslogtreecommitdiff
path: root/sys/netipsec/key.c
AgeCommit message (Expand)Author
2025-07-17ipsec offload: ipsec_accel_fill_xh() should indirect through fn pointerKonstantin Belousov
2025-06-11machine/stdarg.h -> sys/stdarg.hBrooks Davis
2025-03-06pfkey2: use correct value for a key lengthAndrey V. Elsukov
2025-01-06netipsec: Pass the right mbuf upMark Johnston
2024-09-04ipsec: Drain async ipsec_offload work when destroying a vnetMark Johnston
2024-08-30Revert "ipsec: Drain async ipsec_offload work when destroying a vnet"Mark Johnston
2024-08-30ipsec: Drain async ipsec_offload work when destroying a vnetMark Johnston
2024-08-20ipsec_offload: add ipsec_accel_drv_sa_lifetime_fetch()Konstantin Belousov
2024-07-30ipsec_offload: indirect two more functions on the ipsec.ko module loadKonstantin Belousov
2024-07-12ipsec_offload: kernel infrastructureKonstantin Belousov
2024-07-12ipsec: make key_do_allocsp() globalKonstantin Belousov
2024-01-16Add UDP encapsulation of ESP in IPv6Xavier Beaudouin
2023-08-16sys: Remove $FreeBSD$: one-line .c comment patternWarner Losh
2023-06-02ipsec: Make algorithm tables read-onlyMark Johnston
2023-04-25netipsec/key.c: use designated initializers for arraysKonstantin Belousov
2023-04-25netipsec: some styleKonstantin Belousov
2023-02-16ipsec: only update lastused when it changesMateusz Guzik
2023-01-16ipsec: Clear pad bytes in PF_KEY messagesMark Johnston
2022-11-22ipsec: add key_havesp_anyMateusz Guzik
2022-11-22ipsec: prohibit unknown directions in key_havespMateusz Guzik
2022-11-02ipsec: add support for CHACHA20POLY1305Kristof Provost
2022-08-11keysock: do not use raw socket codeGleb Smirnoff
2022-07-26Adjust function definitions in netipsec's key.c to avoid clang 15 warningsDimitry Andric
2022-07-19ipsec: replace SECASVAR mtx by rmlockKristof Provost
2022-02-19ipsec: sprinkle CURVNET_ASSERT_SETMateusz Guzik
2022-01-03netipsec: use SYSINIT(9) instead of dom_init/dom_destroyGleb Smirnoff
2021-12-16crypto: Consistently use AES instead of Rijndael128 for the AES-CBC cipher.John Baldwin
2021-12-14ipsec: fix a logic error in key_do_getnewspiWenfeng Liu
2021-12-03ipsec: fix a panic with INVARIANTSRobert Wing
2021-11-14ipsec: make sure the lock allocated in key_newsav does not false-shareMateusz Guzik
2021-11-14ipsec: fix edge case detection in key_getnewspidMateusz Guzik
2021-11-03ipsec: add a lock encompassing SPI allocationMateusz Guzik
2021-11-03ipsec: fix edge case detection in key_do_getnewspiMateusz Guzik
2021-08-13ipsec: fix race condition in key.cWojciech Macek
2021-08-10netipsec/key.c: Use ANSI C definition for key_random()Konstantin Belousov
2021-06-28ipsec: globalize lft zone and zero out buffers at allocation timeMateusz Guzik
2020-10-16Trigger soft lifetime expiration on sequence numberMarcin Wojtas
2020-09-01net: clean up empty lines in .c and .h filesMateusz Guzik
2020-06-25Simplify IPsec transform-specific teardown.John Baldwin
2020-06-25Use zfree() to explicitly zero IPsec keys.John Baldwin
2020-05-02Remove support for IPsec algorithms deprecated in r348205 and r360202.John Baldwin
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2020-02-12netipsec: fix a mismatched uma_zfree -> uma_zfree_pcpuMateusz Guzik
2019-08-09Add missing new line in several log messages.Andrey V. Elsukov
2019-06-25netipsec key_register: check for M_NOWAIT alloc failureRyan Libby
2019-04-04Replace read_random(9) with more appropriate arc4rand(9) KPIsConrad Meyer
2018-10-21Add sadb_x_sa2 extension to SADB_ACQUIRE requests.Andrey V. Elsukov
2018-09-26Fix witness warning in xform_init().Andrey V. Elsukov
2018-07-24Use the new VNET_DEFINE_STATIC macro when we are defining static VNETAndrew Turner
2018-06-08uma: implement provisional api for per-cpu zonesMateusz Guzik