src/sys/opencrypto, branch releng/12.2

MFC 361393: Correct the minimum key length for Camellia to 16 bytes (128 bits).

2020-08-26T21:35:28Z

MFC r363374:

2020-07-27T14:16:27Z

crypto(9): Stop checking for failures from malloc(M_WAITOK). PR: 240545

MFC 356508: Use falloc_noinstall + finstall for crypto file descriptors.

2020-05-05T04:37:05Z

MFC 356561: Add stricter checking on mac key lengths.

2020-01-20T11:54:00Z

Negative lengths are always invalid. The key length should also be zero for hash algorithms that do not accept a key. admbugs: 949

MFC 356507,356520: Add a reference count to cryptodev sessions.

2020-01-20T11:19:55Z

356507: Add a reference count to cryptodev sessions. This prevents use-after-free races with crypto requests (which may sleep) and CIOCFSESSION as well as races from current CIOCFSESSION requests. 356520: Remove no-longer-used function prototype. admbugs: 949 Sponsored by: Chelsio Communications

MFC 351557: Adjust the deprecated warnings for /dev/crypto to be less noisy.

2019-10-07T20:41:55Z

Warn when actual operations are performed instead of when sessions are created. The /dev/crypto engine in OpenSSL 1.0.x tries to create sessions for all possible algorithms each time it is initialized resulting in spurious warnings.

MFC r342024 (by mmacy): Generalize AES iov optimization

2019-09-11T23:41:09Z

Right now, aesni_cipher_alloc does a bit of special-casing for CRYPTO_F_IOV, to not do any allocation if the first uio is large enough for the requested size. While working on ZFS crypto port, I ran into horrible performance because the code uses scatter-gather, and many of the times the data to encrypt was in the second entry. This code looks through the list, and tries to see if there is a single uio that can contain the requested data, and, if so, uses that. This has a slight impact on the current consumers, in that the check is a little more complicated for the ones that use CRYPTO_F_IOV -- but none of them meet the criteria for testing more than one.

MFC 348970,348974:

2019-08-21T22:42:08Z

Make the warning intervals for deprecated crypto algorithms tunable. 348970: Make the warning intervals for deprecated crypto algorithms tunable. New sysctl/tunables can now set the interval (in seconds) between rate-limited crypto warnings. The new sysctls are: - kern.cryptodev_warn_interval for /dev/crypto - net.inet.ipsec.crypto_warn_interval for IPsec - kern.kgssapi_warn_interval for KGSSAPI 348974: Move declaration of warninterval out from under COMPAT_FREEBSD32. This fixes builds of kernels without COMPAT_FREEBSD32.

MFC 348876: Add warnings to /dev/crypto for deprecated algorithms.

2019-08-20T01:30:35Z

These algorithms are deprecated algorithms that will have no in-kernel consumers in FreeBSD 13. Specifically, deprecate the following algorithms: - ARC4 - Blowfish - CAST128 - DES - 3DES - MD5-HMAC - Skipjack Relnotes: yes

MFC: r343979

2019-06-16T10:46:02Z

As struct cryptop is wrapped in #ifdef _KERNEL, userland doesn't need to drag in either.