src/sys/crypto, branch releng/11.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F11.02016-05-31T04:12:14ZConnect the SHA-512t256 and Skein hashing algorithms to ZFS2016-05-31T04:12:14ZAllan Judeallanjude@FreeBSD.org2016-05-31T04:12:14Zurn:sha1:0144ad3e7873a3b8904f2d8f8c0429029d45993a
Support for the new hashing algorithms in ZFS was introduced in r289422
However it was disconnected because FreeBSD lacked implementations of
SHA-512 (truncated to 256 bits), and Skein.
These implementations were introduced in r300921 and r300966 respectively
This commit connects them to ZFS and enabled these new checksum algorithms
This new algorithms are not supported by the boot blocks, so do not use them
on your root dataset if you boot from ZFS.
Relnotes: yes
Sponsored by: ScaleEngine Inc.
Retune SHA2 code for improved performance on CPUs with more ILP and2016-05-29T17:26:40ZColin Percivalcperciva@FreeBSD.org2016-05-29T17:26:40Zurn:sha1:696c3895ae137cb2c6151d120b4c6f3e6bfc8a1e
a preference for memory load instructions over large code footprints
with embedded immediate variables.
On amd64 CPUs from 2007-2008 there is not a significant change, but
amd64 CPUs from 2009-2010 get roughly 10% more throughput with this
code; amd64 CPUs from 2011-2012 get roughly 15% more throughput; and
AMD64 CPUs from 2013-2015 get 20-25% more throughput. The Raspberry
Pi 2 increases its throughput by 6-8%.
Sponsored by: Tarsnap Backup Inc.
Performance tested by: allanjude
MFC after: 3 weeks
Import the skein hashing algorithm, based on the threefish block cipher2016-05-29T01:15:36ZAllan Judeallanjude@FreeBSD.org2016-05-29T01:15:36Zurn:sha1:b468a9ff1d3a70c6d14cf2b49574cbbcc60ff997
Connect it to userland (libmd, libcrypt, sbin/md5) and kernel (crypto.ko)
Support for skein as a ZFS checksum algorithm was introduced in r289422
but is disconnected because FreeBSD lacked a Skein implementation.
A further commit will enable it in ZFS.
Reviewed by: cem
Sponsored by: ScaleEngine Inc.
Differential Revision: https://reviews.freebsd.org/D6166
Implement SHA-512 truncated (224 and 256 bits)2016-05-28T16:06:07ZAllan Judeallanjude@FreeBSD.org2016-05-28T16:06:07Zurn:sha1:1780e407158ada85e454b24960b83a4f8e35cc25
This implements SHA-512/256, which generates a 256 bit hash by
calculating the SHA-512 then truncating the result. A different initial
value is used, making the result different from the first 256 bits of
the SHA-512 of the same input. SHA-512 is ~50% faster than SHA-256 on
64bit platforms, so the result is a faster 256 bit hash.
The main goal of this implementation is to enable support for this
faster hashing algorithm in ZFS. The feature was introduced into ZFS
in r289422, but is disconnected because SHA-512/256 support was missing.
A further commit will enable it in ZFS.
This is the follow on to r292782
Reviewed by: cem
Sponsored by: ScaleEngine Inc.
Differential Revision: https://reviews.freebsd.org/D6061
crypto routines: Hint minimum buffer sizes to the compiler2016-05-26T19:29:29ZConrad Meyercem@FreeBSD.org2016-05-26T19:29:29Zurn:sha1:571ebf7685f6f4c14d29d3efba04a558def65bd4
Use the C99 'static' keyword to hint to the compiler IVs and output digest
sizes. The keyword informs the compiler of the minimum valid size for a given
array. Obviously not every pointer can be validated (i.e., the compiler can
produce false negative but not false positive reports).
No functional change. No ABI change.
Sponsored by: EMC / Isilon Storage Division
aesni(4): Initialize error before use2016-04-20T03:05:32ZConrad Meyercem@FreeBSD.org2016-04-20T03:05:32Zurn:sha1:c56482419371d3afdc02dcc76c5c9854fc1e118c
Reported by: Coverity
CID: 1331554
Sponsored by: EMC / Isilon Storage Division
Break up opencrypto/xform.c so it can be reused piecemeal2015-12-30T22:43:07ZAllan Judeallanjude@FreeBSD.org2015-12-30T22:43:07Zurn:sha1:2155bb238f8245c92772441f964d0e23247bb464
Keep xform.c as a meta-file including the broken out bits
existing code that includes xform.c continues to work as normal
Individual algorithms can now be reused elsewhere, including outside
of the kernel
Reviewed by: bapt (previous version), gnn, delphij
Approved by: secteam
MFC after: 1 week
Sponsored by: ScaleEngine Inc.
Differential Revision: https://reviews.freebsd.org/D4674
Replace sys/crypto/sha2/sha2.c with lib/libmd/sha512c.c2015-12-27T17:33:59ZAllan Judeallanjude@FreeBSD.org2015-12-27T17:33:59Zurn:sha1:7a3f5d11fb3873674a1f7e27bcc9a5f7ce279390
cperciva's libmd implementation is 5-30% faster
The same was done for SHA256 previously in r263218
cperciva's implementation was lacking SHA-384 which I implemented, validated against OpenSSL and the NIST documentation
Extend sbin/md5 to create sha384(1)
Chase dependancies on sys/crypto/sha2/sha2.{c,h} and replace them with sha512{c.c,.h}
Reviewed by: cperciva, des, delphij
Approved by: secteam, bapt (mentor)
MFC after: 2 weeks
Sponsored by: ScaleEngine Inc.
Differential Revision: https://reviews.freebsd.org/D3929
const'ify an arg that we don't update...2015-07-29T23:37:15ZJohn-Mark Gurneyjmg@FreeBSD.org2015-07-29T23:37:15Zurn:sha1:e381fd293d6d0424a73fc828f56cb82abdd991c1Complete the move that was started w/ r263218.. For some reason I2015-07-11T03:12:34ZJohn-Mark Gurneyjmg@FreeBSD.org2015-07-11T03:12:34Zurn:sha1:2ff9c4f915f0bf0cc3ff557aa64976b83c038e53
didn't delete the files, so that means we need to bring the changes in
r282726 to the correct files..
make tinderbox completed with this patch...