]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Add support to the KTLS OCF module for AES-CBC MTE ciphersuites.
authorjhb <jhb@FreeBSD.org>
Tue, 13 Oct 2020 18:04:19 +0000 (18:04 +0000)
committerjhb <jhb@FreeBSD.org>
Tue, 13 Oct 2020 18:04:19 +0000 (18:04 +0000)
commit3765edd418490956ba0c6e78fbb966a479891107
treeb947a3f2e36595fc62ef1da589d2c2a1aaaa966d
parent4b539280260220a48161a47a7504ac435a589d36
Add support to the KTLS OCF module for AES-CBC MTE ciphersuites.

This is a simplistic approach which encrypts each TLS record in two
separate passes: one to generate the MAC and a second to encrypt.
This supports TLS 1.0 connections with implicit IVs as well as TLS
1.1+ with explicit IVs.

Reviewed by: gallatin
Sponsored by: Netflix
Differential Revision: https://reviews.freebsd.org/D26730
sys/opencrypto/ktls_ocf.c