src-test2/sys/opencrypto, branch release/6.2.0_cvs

This commit was manufactured by cvs2svn to create tag

2007-01-11T22:54:46Z

'RELENG_6_2_0_RELEASE'. This commit was manufactured to restore the state of the 6.2-RELEASE image.

MFC: Synchronize opencrypto framework with HEAD version.

2006-09-04T15:16:14Z

MFC:

2006-03-05T00:48:05Z

crypto.ko depends on zlib. Submitted by: Ben Kelly Approved by: rwatson Point hat to: me MFC after: 1 day Approved by: re (scottl)

MFC:

2006-03-01T21:40:14Z

Connect zlib to the build. This patch fixes a problem, which exists if you have IPSEC in your kernel and want to have crypto support loaded as KLD. By moving zlib to separate module and adding MODULE_DEPEND directives, it is possible to use such configuration without complication. Otherwise, since IPSEC is linked with zlib (just like crypto.ko) you'll get following error: interface zlib.1 already present in the KLD 'kernel'! Approved by: cognet (mentor) Approved by: re (scottl)

MFC: sys/crypto/rijndael/rijndael-alg-fst.c 1.9,1.11

2005-08-30T15:01:50Z

sys/opencrypto/xform.c 1.6 Check key size for rijndael, as invalid key size can lead to kernel panic. I checked other algorithms against this bug and it seems they aren't affected. Reported by: Mike Tancsa PR: i386/84860 Approved by: re (scottl)

MFC: sys/opencrypto/cryptodev.c 1.26

2005-08-19T12:04:19Z

Fix bogus check. It was possible to panic the kernel by giving 0 length. This is actually a local DoS, as every user can use /dev/crypto if there is crypto hardware in the system and cryptodev.ko is loaded (or compiled into the kernel). Reported by: Mike Tancsa Security: Local DoS on systems with crypto HW and with /dev/crypto available Approved by: re (kensmith)

malloc.h relies on param.h for a definition of MAXCPU. I guess that there is

2005-05-30T05:01:44Z

other header pollution that makes this work right now, but it falls over when doing a RELENG_5 -> HEAD upgrade.

just use crypto/rijndael, and nuke opencrypto/rindael.[ch].

2005-03-11T17:24:46Z

the two became almost identical since latest KAME merge. Discussed with: sam

- use 1/2 space for rijndael context in ipsec

2005-03-11T12:45:09Z

- rijndael_set_key() always sets up full context - rijndaelKeySetupDec() gets back original protoype Reviewed by: sam Obtained from: OpenBSD

refer opencrypto/cast.h directly.

2005-03-11T12:37:07Z