mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2024-11-25 14:47:30 +02:00
25a958e9bf
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@13288 3c298f89-4303-0410-b956-a3cf2f4a3e73
1961 lines
46 KiB
Plaintext
1961 lines
46 KiB
Plaintext
2008-09-18 01:27 davidm
|
|
|
|
* Makefile, README, README.sglinux,
|
|
patches/linux-2.6.26-natt.patch, patches/linux-2.6.26-ocf.patch,
|
|
patches/openssl-0.9.8g.patch, patches/openssl-0.9.8i.patch:
|
|
|
|
Updates for a new OCF release with openssl-0.9.8i and linux-2.6.26
|
|
support.
|
|
|
|
2008-09-18 00:19 davidm
|
|
|
|
* Config.in, Kconfig, Makefile, ep80579/Makefile,
|
|
ep80579/environment.mk, ep80579/icp_asym.c, ep80579/icp_common.c,
|
|
ep80579/icp_ocf.h, ep80579/icp_sym.c,
|
|
ep80579/linux_2.6_kernel_space.mk:
|
|
|
|
A new driver from Intel for their Intel QuickAssist enabled EP80579
|
|
Integrated Processor Product Line.
|
|
|
|
Adrian Hoban Brad Vrabete
|
|
|
|
|
|
2008-07-25 01:01 gerg
|
|
|
|
* ocf-compat.h:
|
|
|
|
From linux-2.6.26 onwards there is now a linux/fdtable.h include
|
|
that contains the file_fdtable() definition.
|
|
|
|
2008-07-05 01:20 davidm
|
|
|
|
* Makefile, patches/linux-2.6.25-natt.patch,
|
|
patches/linux-2.6.25-ocf.patch:
|
|
|
|
A new ocf-linux release and some patches to send to the OS guys.
|
|
|
|
2008-07-03 21:21 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Clean up a some possible deadlock/busy wait issues with
|
|
locking/sleeping. This has greatly improved openswan 2.6.14
|
|
reliability ;-)
|
|
|
|
Make more of our state available in /sys for debugging.
|
|
|
|
2008-06-23 20:38 davidm
|
|
|
|
* Config.in, Kconfig:
|
|
|
|
Some settings should be bool's John Gumb
|
|
|
|
2008-05-28 03:43 philipc
|
|
|
|
* ixp4xx/ixp4xx.c: Revert previous checkin since the
|
|
callbacks are meant to complete the crypto request. Before
|
|
reverting this, CONFIG_DEBUG_SLAB gives: slab error in
|
|
verify_redzone_free(): cache `ixp4xx_q': double free detected when
|
|
trying to ssh to the device.
|
|
|
|
2008-04-27 19:31 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
We were not completing a crypto request under some error
|
|
conditions.
|
|
|
|
2008-04-02 01:51 davidm
|
|
|
|
* talitos/talitos.c:
|
|
|
|
This patch is for crypto/ocf/talitos for use on linux 2.6.23. It
|
|
is applied to the ocf-linux-20071215 release.
|
|
|
|
Signed-off-by: Lee Nipper
|
|
|
|
2008-02-29 00:43 davidm
|
|
|
|
* crypto.c, ocf-compat.h, ixp4xx/ixp4xx.c:
|
|
|
|
freshen up the 2.4 support, some recent OCF changes and openswan
|
|
changes are not that old-os friendly.
|
|
|
|
Force OCF to select HW/SW, otherwise it may get stuck on the first
|
|
device. This change means we will favour HW over SW, but we will
|
|
use both as required. Passing in a crid of 0 to crypto_newsession
|
|
effectively meant we were stuck on the first device registered with
|
|
OCF, not good. This only applied to ipsec, cryptodev already did
|
|
the right thing.
|
|
|
|
2008-01-31 07:37 gerg
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
The linux-2.6.24 modules build fails if the pci ID table doesn't
|
|
have a NULL entry at the end. So add one.
|
|
|
|
2008-01-29 09:16 gerg
|
|
|
|
* cryptosoft.c, ocf-compat.h:
|
|
|
|
Added some compatability macros for scatterlist changes from 2.6.24
|
|
onwards.
|
|
|
|
2007-12-16 07:31 davidm
|
|
|
|
* Makefile:
|
|
|
|
missed an openssl patch name change
|
|
|
|
2007-12-16 07:27 davidm
|
|
|
|
* Makefile, README, README.sglinux, patches/linux-2.6.23-ocf.patch,
|
|
patches/openssl-0.9.8e.patch, patches/openssl-0.9.8g.patch,
|
|
patches/ssl.patch:
|
|
|
|
updates for a new ocf release and associated bits
|
|
|
|
2007-12-16 06:36 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Be very careful what you do while potentially in an driver unload
|
|
state or we will call through NULL pointers.
|
|
|
|
Reported by Nawang Chhetan .
|
|
|
|
2007-12-14 22:32 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Add in an unlock_ioctl when available to help SMP systems a lot.
|
|
Otherwise all ioctls get a BKL :-(
|
|
|
|
Problem found by Egor N. Martovetsky
|
|
|
|
2007-12-14 18:29 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
reformat the alg table to make it easier to read.
|
|
|
|
2007-12-14 18:29 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Fix more driver locking/sleeping bugs report by Nawang Chhetan
|
|
|
|
|
|
2007-12-12 21:36 davidm
|
|
|
|
* Config.in, Kconfig, Makefile, pasemi/Makefile, pasemi/pasemi.c,
|
|
pasemi/pasemi_fnu.h:
|
|
|
|
Here I'm including my PA Semi driver patch to OCF. Please consider
|
|
it for inclusion into next OCF release.
|
|
|
|
Egor N. Martovetsky
|
|
|
|
2007-12-05 00:37 davidm
|
|
|
|
* patches/: linux-2.4.35-ocf.patch, linux-2.6.22-ocf.patch:
|
|
|
|
More correct count setting if we get a signal
|
|
|
|
Adrian Hoban
|
|
|
|
2007-12-05 00:02 davidm
|
|
|
|
* random.c:
|
|
|
|
OCF has a static array for holding random data. The random number
|
|
generator I have can write directly into physically contiguous
|
|
memory. Static memory comes from the heap and isn't physically
|
|
contiguous. I could use kmalloc'd memory and then copy into the OCF
|
|
static buf but I'd like to avoid a memory copy. The following patch
|
|
(Physically_Contig_Rand.patch) allows me to avoid a memory copy and
|
|
should not impact the other OCF drivers:
|
|
|
|
Adrian Hoban
|
|
|
|
2007-12-05 00:01 davidm
|
|
|
|
* Kconfig:
|
|
|
|
Fix a typo in the Kconfig
|
|
|
|
2007-11-23 19:15 davidm
|
|
|
|
* talitos/talitos_dev.h:
|
|
|
|
fix the DPRINTF macro so that it actually compiles.
|
|
|
|
2007-11-22 19:41 davidm
|
|
|
|
* ocf-compat.h, talitos/talitos.c, talitos/talitos_dev.h:
|
|
|
|
Various updates to get talitos compiling and work on real-world (ie
|
|
ubuntu) kernels.
|
|
|
|
2007-11-08 02:21 davidm
|
|
|
|
* crypto.c:
|
|
|
|
keep and eye on us being completely blocked. If we have Q's to
|
|
process, but all the requests are blocked, sleep. We do not want
|
|
to busy loop until a driver unblocks as it uses valuable CPU
|
|
resources that could be doing something much more important ;-)
|
|
|
|
2007-11-07 19:04 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
hifn driver was failing to unblock itself under some "out of
|
|
resources" conditions. It would return ERESTART to signal it was
|
|
full but never call crypto_unblock to start things moving again.
|
|
|
|
2007-11-06 02:09 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
Remove some bogus trace left in the driver for the overflow (too
|
|
busy) case.
|
|
|
|
2007-10-12 21:10 gerg
|
|
|
|
* crypto.c, ixp4xx/ixp4xx.c:
|
|
|
|
Fix up use of kmem_cache_create() - it takes one less argument in
|
|
2.6.23 onwards.
|
|
|
|
2007-10-03 02:41 gerg
|
|
|
|
* ixp4xx/Makefile:
|
|
|
|
The directory locations for includes in CSR-2.4 is different. Need
|
|
to modify the CFLAGS accordingly if using CSR-2.4.
|
|
|
|
2007-09-22 00:39 philipc
|
|
|
|
* ixp4xx/Makefile: linux 2.4 make dep was failing. This is
|
|
a quick fix to get it building, need to double check this.
|
|
|
|
2007-09-19 00:13 mmccreat
|
|
|
|
* Config.in: Add config option CONFIG_OCF_IXP4XX_SHA1_MD5,
|
|
that enables SHA1 and MD5 hashing to be done by the IXP4xx crypto
|
|
accelerator (although it is much slower than using cryptosoft).
|
|
|
|
2007-09-18 21:45 mmccreat
|
|
|
|
* Makefile, random.c: - Force the inclusion of autoconf.h,
|
|
which contains #defines for CONFIG_xxx options for OCF. -
|
|
Removing additional -D option, now that we are including the
|
|
CONFIG_xxx #defines.
|
|
|
|
2007-09-18 21:44 mmccreat
|
|
|
|
* Kconfig: Add config option CONFIG_OCF_IXP4XX_SHA1_MD5,
|
|
that enables SHA1 and MD5 hashing to be done by the IXP4xx crypto
|
|
accelerator (although it is much slower than using cryptosoft).
|
|
|
|
2007-09-18 21:37 mmccreat
|
|
|
|
* cryptodev.h: The CRYPTO_MAX_DATA_LEN limit should be
|
|
0xFFFF ie 64K - 1.
|
|
|
|
2007-09-18 21:19 mmccreat
|
|
|
|
* ixp4xx/ixp4xx.c: - Rework the code so that the correct IXP
|
|
function, ixCryptoAccHashPerform(), is used to calculate SHA1 and
|
|
MD5 hashes. NB: The performance of using the IXP4xx hardware is
|
|
really, really poor compared to using cryptosoft (and the kernel
|
|
crypto). - Only support SHA1 and MD5 hashing if the
|
|
CONFIG_OCF_IXP4XX_SHA1_MD5 is enabled.
|
|
|
|
2007-08-30 21:42 davidm
|
|
|
|
* Makefile:
|
|
|
|
do not archive build files in the crypto-tools archive
|
|
|
|
2007-08-22 19:19 mmccreat
|
|
|
|
* cryptodev.c: Fix up the checking for key lengths, when the
|
|
key can be of unlimited size.
|
|
|
|
2007-08-16 01:50 davidm
|
|
|
|
* Makefile:
|
|
|
|
Better 2.4 compat for "make dep" now working with fastdep.
|
|
|
|
2007-07-28 08:25 davidm
|
|
|
|
* Makefile, README, README.sglinux, patches/crypto-tools.patch,
|
|
patches/linux-2.4.29-ocf.patch, patches/linux-2.4.35-ocf.patch,
|
|
patches/linux-2.6.11-ocf.patch, patches/linux-2.6.22-ocf.patch,
|
|
patches/ssl.patch:
|
|
|
|
Update all the patches and put the patch making target back into
|
|
the Makefile.
|
|
|
|
2007-07-28 08:25 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
fix an unused variable warning when HARVESTING is disabled
|
|
|
|
2007-07-27 21:33 davidm
|
|
|
|
* hifn/hifn7751.c, ixp4xx/ixp4xx.c, safe/safe.c, talitos/talitos.c:
|
|
|
|
|
|
Remove all the random code if OCF does not have radom harvesting
|
|
enabled.
|
|
|
|
2007-07-26 00:36 davidm
|
|
|
|
* Kconfig, hifn/hifnHIPP.c, hifn/hifnHIPPvar.h:
|
|
|
|
Changes to get the hifn HIPP stub driver to build.
|
|
|
|
2007-07-25 21:25 davidm
|
|
|
|
* Makefile, hifn/Makefile, hifn/hifnHIPP.c, hifn/hifnHIPPreg.h,
|
|
hifn/hifnHIPPvar.h, ixp4xx/Makefile, ocfnull/Makefile,
|
|
safe/Makefile, talitos/Makefile:
|
|
|
|
Bring in the hifnHIPP driver written by Xelerance. This is the
|
|
super hifn chip with full protocol offload.
|
|
|
|
Switch to much more traditional Makefile/subdir building. The
|
|
Makefiles are nicer now, but still not beautiful, 2.6 and 2.4
|
|
capable builds result in a certain amount of uglyiness.
|
|
|
|
2007-07-24 21:46 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Clean up all the driver id checking and session management so
|
|
adding/removing drivers all continues to run cleanly.
|
|
|
|
2007-07-24 20:14 davidm
|
|
|
|
* talitos/talitos.c:
|
|
|
|
From: Ahsan Kabir
|
|
|
|
less than .1% packet corruption was detected using the talitos
|
|
driver. It turns out we don't need the cipher iv out len/ptr field
|
|
to do ESP IPsec. Therefore we set the len field as 0, which tells
|
|
the SEC not to do anything with this len/ptr field.
|
|
|
|
Signed-off-by: Ahsan Kabir
|
|
Signed-off-by: Kim Phillips
|
|
|
|
2007-07-24 08:25 davidm
|
|
|
|
* cryptosoft.c, ocf-bench.c, hifn/hifn7751.c, ixp4xx/ixp4xx.c,
|
|
safe/safe.c, talitos/talitos.c:
|
|
|
|
Switch the remaining GFP_ATOMIC to the newer and not deprecated
|
|
SLAB_ATOMIC
|
|
|
|
2007-07-23 22:16 mmccreat
|
|
|
|
* ixp4xx/ixp4xx.c: Add missing ";" from end of dprintk()
|
|
call!
|
|
|
|
2007-07-21 01:16 davidm
|
|
|
|
* ocf-compat.h, rndtest.c, hifn/hifn7751.c, safe/safe.c:
|
|
|
|
pci_register_driver is nothing like it is depending on the kernel,
|
|
so we need a compat function to fix it up for all kernels before
|
|
2.6.10, and in different ways for older and not so older versions.
|
|
|
|
2007-07-20 21:54 davidm
|
|
|
|
* safe/safe.c:
|
|
|
|
Make the debug macro ';' safe so you do not get compiler warnings
|
|
|
|
2007-07-20 21:53 davidm
|
|
|
|
* talitos/: talitos.c, talitos_dev.h, talitos_soft.h:
|
|
|
|
update to the latest FreeBSD driver structure and fix up the code
|
|
as required.
|
|
|
|
2007-07-20 03:07 davidm
|
|
|
|
* rndtest.c:
|
|
|
|
more headers needed to compile on 2.4
|
|
|
|
2007-07-20 03:00 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Put in the 2.4 stubs to support compression
|
|
|
|
2007-07-20 02:53 davidm
|
|
|
|
* crypto.c, ocf-compat.h:
|
|
|
|
move some more compat stuff into the compat header.
|
|
|
|
2007-07-20 02:47 davidm
|
|
|
|
* talitos/talitos.c:
|
|
|
|
support of_platform_driver for newer, ARCH=powerpc based kernels.
|
|
Signed-off-by: Kim Phillips
|
|
|
|
2007-07-20 02:46 davidm
|
|
|
|
* talitos/talitos.c:
|
|
|
|
From: Ahsan Kabir
|
|
|
|
When Talitos completes job both the channel and execution unit are
|
|
capable of generating interrupts. Talitos used to take two
|
|
interrupts per request - one for channel completion and the other
|
|
for execution unit completion. This patch ensures that Talitos
|
|
takes interrupt only for channel completion. Execution unit will
|
|
generate interrupt only when there is error and the error
|
|
interrupts for execution units are not masked.
|
|
|
|
Signed-off-by: Ahsan Kabir
|
|
Signed-off-by: Kim Phillips
|
|
|
|
2007-07-20 02:37 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Unless the user specifies, select from both HW and SW.
|
|
|
|
Clean up some debug to report the actual ioctl name.
|
|
|
|
Compiler warning on newer compilers.
|
|
|
|
2007-07-20 02:35 davidm
|
|
|
|
* cryptodev.h:
|
|
|
|
moved dprintk to the compat code, seemed nicer in there.
|
|
|
|
2007-07-20 02:35 davidm
|
|
|
|
* rndtest.c:
|
|
|
|
Need to clean up some warnings etc, more includes
|
|
|
|
2007-07-20 02:34 davidm
|
|
|
|
* ocf-compat.h, hifn/hifn7751.c, safe/safe.c:
|
|
|
|
new shared IRQ flags for 2.6.22 and a safer version of the debug
|
|
macro
|
|
|
|
2007-07-20 00:52 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Implement compression based on the code from the openswan guys.
|
|
|
|
2007-07-20 00:52 davidm
|
|
|
|
* criov.c:
|
|
|
|
Fix compiler warning on non-value returning void func.
|
|
|
|
2007-07-18 22:55 davidm
|
|
|
|
* hifn/hifn7751.c, safe/safe.c:
|
|
|
|
Use pci_register_driver rather than pci_module_init.
|
|
pci_module_init has been dropped in 2.6.22 yet pci_register_driver
|
|
has always existed and used to do some crazy hotplug junk.
|
|
|
|
2007-07-18 21:55 gerg
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Added a missing ";" at the end of the ixp_kproces() prototype. It
|
|
is IXP465 specific, only showed up when generateing for SG720.
|
|
|
|
2007-07-17 00:37 davidm
|
|
|
|
* Makefile, cryptodev.c, random.c, rndtest.c, hifn/hifn7751.c,
|
|
ocfnull/ocfnull.c, safe/safe.c:
|
|
|
|
Fixup all the debug support for 2.4 kernels, clean up the entropy
|
|
harvester to be far more robust.
|
|
|
|
2007-07-14 02:19 davidm
|
|
|
|
* talitos/talitos.c:
|
|
|
|
Old patch that had not been applied Kim Phillips
|
|
|
|
|
|
2007-07-14 01:12 davidm
|
|
|
|
* Config.in, Kconfig, Makefile, cryptodev.c, cryptodev.h, random.c,
|
|
syscall.h:
|
|
|
|
Finally ditched all the syscall stuff. You can now enable/disable
|
|
the random harvestor. Pulled in most of random.c from openswan
|
|
project and fixed some obvious bugs (that were always there).
|
|
|
|
2007-07-13 21:59 davidm
|
|
|
|
* ocf-compat.h:
|
|
|
|
Better error printing and checking for drivers
|
|
|
|
2007-07-13 21:56 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Fix some incorrect debug (reporting wrong error type)
|
|
|
|
2007-07-13 21:55 davidm
|
|
|
|
* hifn/hifn7751.c, safe/safe.c:
|
|
|
|
Make the code more similar to Free-BSD by reverting to the same
|
|
debug macros
|
|
|
|
2007-07-13 21:53 davidm
|
|
|
|
* ocfnull/ocfnull.c:
|
|
|
|
Fix up the null driver to work again in the new framework.
|
|
|
|
2007-07-06 23:54 mmccreat
|
|
|
|
* cryptodev.c, cryptodev.h, cryptosoft.c: - Update OCF to
|
|
work with new Crypto API introduced in 2.6.19 kerneli, and add
|
|
macros so it work with older kernels. - Add support for SHA256,
|
|
SHA384 and SHA512 HASH and HMAC algorithms. - Cryptosoft: Only
|
|
register algorithms that the kernel has implementations for.
|
|
|
|
2007-07-03 19:52 davidm
|
|
|
|
* Kconfig, README, README.sglinux, criov.c, crypto.c, cryptodev.c,
|
|
cryptodev.h, cryptosoft.c, ocf-bench.c, ocf-compat.h, random.c,
|
|
rndtest.c, uio.h, hifn/hifn7751.c, hifn/hifn7751reg.h,
|
|
hifn/hifn7751var.h, ixp4xx/ixp4xx.c, ocfnull/ocfnull.c,
|
|
safe/safe.c, safe/safevar.h, talitos/talitos.c:
|
|
|
|
Updated OCF to the lastest FreeBSD version.
|
|
|
|
There was a lot of change in here, some of which will help FIP's,
|
|
some which won't.
|
|
|
|
Did lots of cleaning and diff reduction against the freebsd code.
|
|
Still more cleaning to do.
|
|
|
|
2007-06-01 21:58 gerg
|
|
|
|
* Config.in:
|
|
|
|
Put the regular old Config.in back, needed for puclic releases.
|
|
|
|
2007-06-01 21:58 gerg
|
|
|
|
* Kconfig:
|
|
|
|
Change the CONFIG_OCF_IXP400 dependencies to be the same as they
|
|
where in the Config.in file.
|
|
|
|
2007-05-28 21:40 gerg
|
|
|
|
* Config.in, Kconfig:
|
|
|
|
Switch all module configuration over to new style Kconfigs.
|
|
|
|
2007-05-24 18:49 davidm
|
|
|
|
* cryptodev.c, random.c:
|
|
|
|
Work around some problems on redhat systems with errno redefinition
|
|
|
|
2007-04-30 21:09 gerg
|
|
|
|
* cryptosoft.c:
|
|
|
|
The CRYPTO_TFM_MODE_ family of defines no longer exists from 2.6.21
|
|
onwards. As far as I can tell you don't need to pass it to the
|
|
crypto_alloc_tfm() function anymore.
|
|
|
|
So define it to be 0 if it doesn't exist.
|
|
|
|
2007-04-03 02:13 gerg
|
|
|
|
* syscall.h:
|
|
|
|
Added syscall macros for SH architecture. Just temporary, 'till
|
|
Dave fixes the OCF code to not use syscalls from the modules :-)
|
|
|
|
2007-02-16 23:10 davidm
|
|
|
|
* syscall.h:
|
|
|
|
ensure the temprary 2.6 fix doesn't break 2.4
|
|
|
|
2007-02-07 22:23 gerg
|
|
|
|
* cryptodev.c, random.c, syscall.h:
|
|
|
|
Temporary fix for new 2.6 kernels no longer defining in-kernel
|
|
system call functions. Define them locally for now until we fix
|
|
properly.
|
|
|
|
2007-02-07 03:10 gerg
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Changes to support the different INIT_WORK() mechanism from kernels
|
|
2.6.20 onwards.
|
|
|
|
2007-02-06 02:38 gerg
|
|
|
|
* crypto.c:
|
|
|
|
Cleaned up use of kmem_cache_t and use of SLAB_ATOMIC.
|
|
|
|
2006-12-05 20:50 cpascoe
|
|
|
|
* hifn/hifn7751.c, safe/safe.c, talitos/talitos.c:
|
|
|
|
Remove pt_regs from OCF interrupt handlers for 2.6.19+
|
|
|
|
2006-12-02 03:36 gerg
|
|
|
|
* criov.c, crypto.c, cryptodev.c, cryptosoft.c, ocf-bench.c,
|
|
random.c, rndtest.c, hifn/hifn7751.c, ixp4xx/ixp4xx.c,
|
|
ocfnull/ocfnull.c, safe/safe.c, talitos/talitos.c:
|
|
|
|
Can no longer include linux/config.h as of 2.6.19 kernels. Need to
|
|
conditionally include it based on AUTOCONF_INCLUDED not being
|
|
defined.
|
|
|
|
2006-10-13 21:52 cpascoe
|
|
|
|
* random.c:
|
|
|
|
Remove another race condition that may result in us running more
|
|
than one random thread if modules are reloaded during heavy system
|
|
load.
|
|
|
|
2006-10-13 21:18 cpascoe
|
|
|
|
* random.c:
|
|
|
|
- Permit delivery of SIGKILL to the random thread. - Do not exit
|
|
prematurely if poll() is interrupted. - Improve exit conditions so
|
|
that we quit immediately, rather than loop infinitely, if the
|
|
last RNG source is removed while we are trying to fill our
|
|
buffer.
|
|
|
|
2006-10-03 20:28 cpascoe
|
|
|
|
* crypto.c, crypto.c: AutoMerged
|
|
>
|
|
> Zero the empty half of "new driver" buffer, and not past the end
|
|
of the old
|
|
> buffer that we are about to free.
|
|
|
|
2006-10-03 20:28 cpascoe
|
|
|
|
* crypto.c:
|
|
|
|
Zero the empty half of "new driver" buffer, and not past the end of
|
|
the old buffer that we are about to free.
|
|
|
|
2006-08-25 23:57 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Do not print errors for failed ALG requests unless debugging
|
|
|
|
2006-07-14 21:44 davidm
|
|
|
|
* cryptodev.h:
|
|
|
|
2.6.11 and earlier did not have the files_fdtable macro.
|
|
|
|
2006-06-21 21:26 gerg
|
|
|
|
* cryptodev.h, hifn/hifn7751.c, ocfnull/ocfnull.c, safe/safe.c,
|
|
talitos/talitos.c:
|
|
|
|
Fixed up more occurrances of MODULE_PARM() needing to be converted
|
|
to module_param() (as of 2.6.17 and onwards).
|
|
|
|
2006-06-21 00:28 gerg
|
|
|
|
* cryptosoft.c:
|
|
|
|
Change use of MODULE_PARM to module_param() for 2.6.17+ kernels.
|
|
|
|
2006-06-20 22:13 gerg
|
|
|
|
* crypto.c, cryptodev.c, cryptodev.h, ocf-bench.c, ixp4xx/ixp4xx.c:
|
|
|
|
|
|
As of 2.6.17 and onwards module_param is used in place of
|
|
MODULE_PARM.
|
|
|
|
2006-06-06 00:31 gerg
|
|
|
|
* Makefile:
|
|
|
|
Fix Makefile to find includes is using CSR-2.1.
|
|
|
|
2006-05-31 01:44 gerg
|
|
|
|
* cryptodev.h:
|
|
|
|
The vars "crypto_usercrypto", "crypto_userasymcrypto" are declared
|
|
as extern in the header file, but static in the c file. I guessed
|
|
that they should probably be truely static, so removed the extern
|
|
declarations from the header.
|
|
|
|
2006-05-25 21:06 davidm
|
|
|
|
* talitos/talitos.c:
|
|
|
|
This fixes a situation that I never provably experienced, where a
|
|
descriptor in memory may be reserved within the proper lock, and
|
|
freed immediately after, only for a few cycles, right outside the
|
|
lock. Kim Phillips
|
|
|
|
2006-05-15 19:49 davidm
|
|
|
|
* criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
|
|
ocf-bench.c, random.c, rndtest.c, uio.h, ixp4xx/ixp4xx.c:
|
|
|
|
Remove the "all rights reserved" from the Intel copyrights.
|
|
|
|
2006-05-12 21:19 davidm
|
|
|
|
* Config.in, Kconfig, Makefile, cryptodev.c, ocf-bench.c,
|
|
ocfnull/ocfnull.c:
|
|
|
|
Add in a null OCF driver that does nothing at all, useful for
|
|
measuring the cost of various parts of the ipsec stack.
|
|
|
|
2006-05-12 21:17 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
make sure we do not overwrite a correctly set error type.
|
|
|
|
2006-05-12 06:52 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Fix a problem where a driver would return ERESTART (full) but then
|
|
unblock itself before the upper layer had marked it as blocked.
|
|
This caused the code to get stuck in crypto_proc and process no
|
|
more requests.
|
|
|
|
2006-05-12 06:47 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Implement CRD_F_KEY_EXPLICIT for cryptosoft so keys can be changed
|
|
on an active session.
|
|
|
|
2006-05-10 20:09 davidm
|
|
|
|
* README, criov.c, crypto.c, cryptodev.h, cryptosoft.c,
|
|
ocf-bench.c, random.c, rndtest.c, uio.h, hifn/hifn7751.c,
|
|
ixp4xx/ixp4xx.c, safe/safe.c, safe/safevar.h:
|
|
|
|
update email addresses and other house cleaning
|
|
|
|
2006-05-10 20:08 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
pull in better error checking from openswan modifications
|
|
|
|
2006-05-10 19:11 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Fix an unused variable warning when various options are disabled.
|
|
|
|
2006-05-10 19:10 davidm
|
|
|
|
* cryptodev.h:
|
|
|
|
Add support for 2.4 kernels for the new FD cloning operation
|
|
|
|
2006-05-09 19:48 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
remove the hifn 7855 support, this driver will never work with
|
|
that chip.
|
|
|
|
2006-05-08 23:34 davidm
|
|
|
|
* hifn/hifn7751var.h:
|
|
|
|
Contiguous buffer support so that ocf-bench can run properly.
|
|
|
|
2006-05-05 23:21 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
Add in contiguous buffer support so that ocf-bench and run on the
|
|
driver.
|
|
|
|
2006-05-05 23:14 davidm
|
|
|
|
* ocf-bench.c:
|
|
|
|
Our requests were out of order, need to do crypto then auth on
|
|
encrypt requests. Some drivers enforce this.
|
|
|
|
2006-05-04 23:21 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Do not run "newsession" with lock, since newsession may sleep on
|
|
some targets. Handle the accounting so that things are not pulled
|
|
from underneath us.
|
|
|
|
2006-05-04 23:20 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Switch to a less optimal (marginally) solution for creating a new
|
|
fd that appears to work in far more versions of the kernel
|
|
including 64bit versions.
|
|
|
|
2006-05-04 18:54 davidm
|
|
|
|
* ocf-bench.c:
|
|
|
|
Turn off the IXP access lib benchmarking by default as most people
|
|
don't have it.
|
|
|
|
Paul Wouters
|
|
|
|
2006-04-01 08:23 davidm
|
|
|
|
* Makefile:
|
|
|
|
Remove more temp files when cleaning
|
|
|
|
2006-04-01 08:12 davidm
|
|
|
|
* hifn/hifn7751reg.h:
|
|
|
|
7855 PCI id's as yet untested
|
|
|
|
2006-04-01 08:08 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
add PCI id's for the 7855 and AES support, card is untested still
|
|
as it requires 128MB of PCI memory !
|
|
|
|
2006-03-31 08:38 davidm
|
|
|
|
* README.sglinux:
|
|
|
|
small update to instructions with corrected patch name
|
|
|
|
2006-03-31 00:23 davidm
|
|
|
|
* Config.in:
|
|
|
|
Add the Talitos driver to the 2.4 config, even though it probably
|
|
won't compile.
|
|
|
|
2006-03-30 07:48 davidm
|
|
|
|
* Kconfig, Makefile, talitos/talitos.c, talitos/talitos_dev.h,
|
|
talitos/talitos_soft.h:
|
|
|
|
Please find attached the freescale SEC driver for OCF. It's been
|
|
(most recently) tested on an SEC2.0 based MPC8541E
|
|
(cryptographically identical to the MPC8555E) under 2.6.15.2, with
|
|
openssl-0.9.8a and openswan-2.4.3 (2.4.5rc5 won't keep the security
|
|
association up for me for some reason).
|
|
|
|
Please feel free to add it to your next release of OCF-Linux :-)
|
|
|
|
Kim Phillips
|
|
|
|
2006-03-20 19:34 davidm
|
|
|
|
* safe/: safe.c, safevar.h:
|
|
|
|
Safenet 1141 v1.0 chips have a DMA lockup error if you access the
|
|
chip while DMA'ing. As a work around you need to limit your DMA to
|
|
256 byte chunks using scatter/gather descriptors. All the SG/SME
|
|
products have v1.0 chips and would lockup with more than two
|
|
outstanding packets at one time.
|
|
|
|
Fix the KASSERT macro
|
|
|
|
Add some more exhaustive initialisation.
|
|
|
|
2006-03-15 21:58 davidm
|
|
|
|
* cryptodev.h, random.c:
|
|
|
|
Switch random support to "ints" since that is what the kernel uses
|
|
and not using the same thing is 64bit wise a bad idea.
|
|
|
|
Fix FIP's code to ensure correct amount of data is passed in.
|
|
|
|
Add work around for broken 64bit OS RNG support (disable it)
|
|
|
|
General code cleanups.
|
|
|
|
2006-03-15 21:55 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
Fixes for 64bit OS's, make sure PCI address are within bus space,
|
|
make sure we order writes to the bus so that chip functions
|
|
correctly. Some small cleanups.
|
|
|
|
2006-03-15 21:48 davidm
|
|
|
|
* hifn/hifn7751var.h:
|
|
|
|
Remove unused field from structure
|
|
|
|
2006-03-15 21:47 davidm
|
|
|
|
* safe/safe.c:
|
|
|
|
Make the code more 64bit OS compatible, force PCI address space
|
|
and so on.
|
|
|
|
2006-03-09 20:42 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
If we call ixpCryptoAccInit() and it fails, just assume that it
|
|
has already been called. This allows our "rc" scripts to be
|
|
openswan and freeswan compatible ore easily.
|
|
|
|
2006-02-28 23:21 davidm
|
|
|
|
* README:
|
|
|
|
generalise it a bit so rel-dates don't get in the way
|
|
|
|
2006-02-28 01:52 davidm
|
|
|
|
* README, patches/ssh.patch, patches/ssl.patch:
|
|
|
|
Updated the README and patches for a release
|
|
|
|
2006-02-25 09:21 davidm
|
|
|
|
* README, README.sglinux:
|
|
|
|
updates for a new release of OCF, ssl patches and so on.
|
|
|
|
2006-02-25 08:44 davidm
|
|
|
|
* crypto.c:
|
|
|
|
We were calling the "process"routines with interrupts disabled. I
|
|
can see no good reason for this and it provokes badness warnings in
|
|
2.6 under some conditions.
|
|
|
|
I am going to run with the Q's unlocked for processing, and
|
|
hopefully it will allow the system to be more responsive. It
|
|
hasn't affected ipsec throughput in any way. Userland throughput
|
|
(multi threaded) may have improved significantly though, but it
|
|
needs more testing.
|
|
|
|
2006-02-24 23:32 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Whoa, set the segments with uninitted values can't be good. Clean
|
|
out the rest of the old code that was accidently left in.
|
|
|
|
2006-02-22 01:02 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Still not sure about this one, but this is working for all the
|
|
cases I can see so far. If it gets weird, I am going to switch to
|
|
a simple clone and chain the sessions rather than a new fcr per fd.
|
|
|
|
2006-02-20 22:12 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Error handling case could free data that was not allocated
|
|
|
|
Ronen Shitrit Marvell Semiconductor Israel
|
|
Ltd
|
|
|
|
2006-02-20 21:57 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Proper SHA/MD5 (non hmac) implementation, remove some retrictions
|
|
for hashes (which only applied to crypto) and fix over zealous
|
|
error checking.
|
|
|
|
Ronen Shitrit Marvell Semiconductor Israel
|
|
Ltd
|
|
|
|
2006-02-09 21:15 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
The code wasn't quite right and needed some fixing for proper file
|
|
accounting.
|
|
|
|
2006-01-24 20:08 davidm
|
|
|
|
* crypto.c, cryptodev.c, hifn/hifn7751.c:
|
|
|
|
We implement our own open in the CRIOGET ioctl now which does
|
|
pretty much the same thing as the BSD version, rather than use an
|
|
open system call which gets caught out by chroot.
|
|
|
|
2006-01-06 00:42 gerg
|
|
|
|
* cryptosoft.c:
|
|
|
|
Moved "{" block marker inside the set of
|
|
"defined(CONFIG_CRYPTO_HMAC) || defined(CONFIG_CRYPTO_HMAC_MODULE)"
|
|
code (in function swcr_process) so that it compiled if these where
|
|
not defined.
|
|
|
|
2005-11-11 01:44 davidm
|
|
|
|
* Makefile, README:
|
|
|
|
cleanups for a general release of OCF
|
|
|
|
2005-11-11 01:18 davidm
|
|
|
|
* patches/ssl.patch:
|
|
|
|
Updated the ssl patch to the latest and greatest changed we have
|
|
made.
|
|
|
|
2005-11-10 21:41 davidm
|
|
|
|
* Makefile, ixp4xx/ixp4xx.c:
|
|
|
|
Better debug for bad input.
|
|
|
|
Have make clean do more cleaning and less talking.
|
|
|
|
2005-11-03 20:53 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
clean up some compilation errors with various options on/off
|
|
|
|
2005-10-25 00:25 davidm
|
|
|
|
* Makefile:
|
|
|
|
Add a patch target that generates full kernel patches to add OCF
|
|
into either a 2.4 or 2.6 kernel as a single patch.
|
|
|
|
2005-10-25 00:24 davidm
|
|
|
|
* Kconfig:
|
|
|
|
Make sure all OCF settings depend on OCF_OCF
|
|
|
|
2005-09-23 02:45 davidm
|
|
|
|
* README, README.sglinux:
|
|
|
|
new crypto-tools archive to keep the tools up to date
|
|
|
|
2005-09-23 02:08 davidm
|
|
|
|
* Makefile, README, README.sglinux:
|
|
|
|
updates for doing OCF releases
|
|
|
|
2005-09-23 01:59 davidm
|
|
|
|
* patches/: ssh.patch, ssl.patch:
|
|
|
|
updated the patches for the latest in fixes etc to ssh/ssl for a
|
|
new OCF release before the openswan 2.4.1 merge.
|
|
|
|
2005-09-21 00:57 davidm
|
|
|
|
* Makefile, cryptosoft.c, hifn/hifn7751.c, ixp4xx/ixp4xx.c:
|
|
|
|
Fixes for building cleanly under 2.6
|
|
|
|
2005-09-13 23:11 davidm
|
|
|
|
* ocf-bench.c:
|
|
|
|
Add an exit function for cleaner 2.6 support. Patch from Ronen
|
|
Shitrit
|
|
|
|
2005-07-30 00:23 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
Add proper hooks for MD5/SHA and their HMAC countrparts processing
|
|
from cryptodev.
|
|
|
|
2005-07-29 01:50 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
cryptodev did not support MD5 and SHA1, only the HMAC versions
|
|
|
|
2005-07-29 01:05 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
register for MD5, return 16 bytes for MD5 and 12 for MD5_HMAC,
|
|
likewise for SHA1 (only 20 is not HMAC).
|
|
|
|
2005-07-28 21:52 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
First pass fix of userland MD5 processing. We now do as well as
|
|
the safenet does, I think.
|
|
|
|
2005-07-27 06:23 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
udelay doesn't give up the current thread, thus the kernel will get
|
|
locked if a process is killed but the hardware never completes the
|
|
crypto request.
|
|
|
|
2005-07-22 02:07 davidm
|
|
|
|
* crypto.c, cryptodev.h:
|
|
|
|
Implement queuing limits for input/output and OCF requests.
|
|
|
|
Implement 2.6 style work queues instead of the 2.4 task_queues.
|
|
|
|
2005-07-21 20:42 davidm
|
|
|
|
* cryptodev.h, ocf-bench.c, ixp4xx/ixp4xx.c:
|
|
|
|
Fix OCF to use work queues, add 2.4 version of work queues to
|
|
cryptodev.h for use in ipsec and elsewhere.
|
|
|
|
Problem and initial patch provided by David Vrabel
|
|
. Cleaned up and 2.4 support added by me.
|
|
|
|
2005-07-21 19:08 davidm
|
|
|
|
* random.c:
|
|
|
|
Fix spinlock initialisation, problem reported by Andy @
|
|
windsorcarclub.co.uk.
|
|
|
|
2005-07-20 20:24 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
fix a silly spelling mistake
|
|
|
|
2005-07-08 00:56 gerg
|
|
|
|
* Makefile:
|
|
|
|
Only build ocf-bench when CONFIG_OCF_BENCH is acrually enabled.
|
|
|
|
2005-06-27 20:29 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Ok, we need a simple implentation here or we go too slow for UDP
|
|
tests. For now, if the Q is full just ditch the packet, someone
|
|
has to do it.
|
|
|
|
2005-06-25 01:13 davidm
|
|
|
|
* safe/safe.c:
|
|
|
|
bytes swapping etc all seems wrong for safenet on BE, these fixes
|
|
see both MD5 and SHA1 working with OpenSwan.
|
|
|
|
2005-06-22 23:10 davidm
|
|
|
|
* random.c:
|
|
|
|
clean up some ifdef code a little
|
|
|
|
2005-06-22 21:28 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Make sure we do not call blocking functions from ISR callable
|
|
routines. In this case we were calling ixCryptoAccCtxUnregister.
|
|
|
|
Run all the random numbers through SHA1 process to ensure more
|
|
uniform distribution of bits (NOTE: it is not more random in any
|
|
way)
|
|
|
|
2005-06-21 00:11 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
do not process requests from the register callback, gets the AES
|
|
code all messed up.
|
|
|
|
Align caches on HW cache boundaries ot improve speed.
|
|
|
|
More tracking or potential errors.
|
|
|
|
2005-06-15 01:55 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
technically ixCryptoAccCtxRegister cannot be called from IRQ
|
|
context, so run it from the immediate BH.
|
|
|
|
2005-06-14 23:13 davidm
|
|
|
|
* ocf-bench.c:
|
|
|
|
Fix some compile warnings/errors
|
|
|
|
2005-06-14 20:52 davidm
|
|
|
|
* Config.in, Kconfig, Makefile, ocf-bench.c:
|
|
|
|
Add in kernel benchmark driver
|
|
|
|
Support for building under CSR 1.4 and 2.0 is now complete
|
|
|
|
2005-06-14 20:51 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Do not use immediate processing for SW drivers otherwise we hold a
|
|
lock for too long. Instead force BATCH processing.
|
|
|
|
Problem found by David Vrabel
|
|
|
|
2005-06-14 20:46 davidm
|
|
|
|
* cryptodev.c:
|
|
|
|
Fix up AES minimum key size
|
|
|
|
Make some more variables static
|
|
|
|
2005-06-14 20:36 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Use kernel caches as they are more efficient and faster to obtain.
|
|
|
|
Fix some spelling
|
|
|
|
Tune PKE to only use the space required. Turn off go fast options
|
|
to reduce any speed-related cracking.
|
|
|
|
Only zero data that needs to be zeroed (save some cycles)
|
|
|
|
2005-06-02 21:42 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Added optimisations ideas from Intel the improve the PKE
|
|
performance for 512 and 1024 bits operations.
|
|
|
|
2005-06-01 02:13 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Looks like I found the ixp bug. Using OSAL buffer routines on
|
|
non-OSAL buffers is a very very bad thing to do. Must double check
|
|
all the API's I am using (ie., PKE) just to be sure.
|
|
|
|
2005-05-31 21:38 davidm
|
|
|
|
* Config.in, Kconfig:
|
|
|
|
Updated/Added the menu wrapper for the config options
|
|
|
|
2005-05-31 21:18 gerg
|
|
|
|
* Config.in:
|
|
|
|
Reworked the config.in so that each sub-module has its own
|
|
Config.in. That way it is easier to make release trees with some
|
|
modules left in.
|
|
|
|
2005-05-30 19:46 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
Not all the Pke code was appropriately ifdef'd
|
|
|
|
2005-05-28 01:49 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
We were not injecting data in the right places nor calling the
|
|
cipher code the best was under all situations. We are now good
|
|
enought to do ESP/AH processing with 3DES and SHA1-HMAC.
|
|
|
|
2005-05-28 01:42 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
|
|
Non atomic kmallocs at IRQ time are bad and cause lockups
|
|
|
|
2005-05-21 08:31 davidm
|
|
|
|
* README, README.sglinux:
|
|
|
|
Some small updates to email and patches that no longer exist
|
|
|
|
2005-05-21 08:25 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
better error message on failure, a lot of the error check we do
|
|
sems to break apps like cryptotest, not sure who is right yet.
|
|
|
|
2005-05-21 00:55 davidm
|
|
|
|
* criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
|
|
random.c, rndtest.c, uio.h, hifn/hifn7751.c, ixp4xx/ixp4xx.c,
|
|
safe/safe.c, safe/safevar.h:
|
|
|
|
Convert to CyberGuard email addresses for OCF files.
|
|
|
|
2005-05-21 00:28 davidm
|
|
|
|
* crypto.c, cryptodev.c, cryptosoft.c, hifn/hifn7751.c,
|
|
ixp4xx/ixp4xx.c, safe/safe.c:
|
|
|
|
final round of naming changes, hifn driver also confirmed working
|
|
in SG710
|
|
|
|
2005-05-20 23:50 davidm
|
|
|
|
* cryptosoft.c, random.c, uio.h, ixp4xx/ixp4xx.c:
|
|
|
|
more copyright/author updates etc for Intel
|
|
|
|
2005-05-20 23:48 davidm
|
|
|
|
* criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
|
|
random.c, rndtest.c, uio.h, ixp4xx/ixp4xx.c, safe/safe.c,
|
|
safe/safevar.h:
|
|
|
|
updated copyrights to reflect Intels interest/investment in the
|
|
project
|
|
|
|
2005-05-20 20:31 davidm
|
|
|
|
* hifn/: hifn7751.c, hifn7751var.h:
|
|
|
|
Most of a working SKB implementation now
|
|
|
|
2005-05-20 20:30 davidm
|
|
|
|
* safe/: md5.c, md5.h, safe.c, sha1.c, sha1.h:
|
|
|
|
Full AH/ESP processing now working, just added BSD sha/md5
|
|
routines as needed for now.
|
|
|
|
2005-05-20 20:30 davidm
|
|
|
|
* random.c:
|
|
|
|
use the new BSD rndtest code rather than the old GPL fips code
|
|
|
|
2005-05-20 20:28 davidm
|
|
|
|
* Makefile, fips.c, fips.h, rndtest.c, rndtest.h:
|
|
|
|
Get rid of the GPL version of the fips test and use a BSD licensed
|
|
version so no one can get upset and cry derivative :-)
|
|
|
|
2005-05-20 08:19 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
High throughput improvements. Can now handle multiple simultaneous
|
|
requests.
|
|
|
|
2005-05-20 00:55 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
|
|
works with openswan/OCF for ipsec receive.
|
|
|
|
fixes ESP/AUTH processing (esp. HMAC)
|
|
|
|
This driver needs a rework for kernel IPSEC as it's current packet
|
|
at a time processing is not up to the task.
|
|
|
|
2005-05-20 00:53 davidm
|
|
|
|
* cryptosoft.c:
|
|
|
|
working ESP/AUTH code now impleneted. Can do RX processing for
|
|
openswan KLIPS.
|
|
|
|
Fixes numerous problems in skb processing
|
|
|
|
Fixes broken HMAC code and IV processing
|
|
|
|
2005-05-14 01:44 davidm
|
|
|
|
* cryptodev.c, ixp4xx/ixp4xx.c:
|
|
|
|
Cleanup IXP key processing to guarantee only a single outstanding
|
|
request rather than relying on the intel driver to get it right.
|
|
Stops us losing requests.
|
|
|
|
Tighten up the cryptodev response to "no answer" so that we don't
|
|
take all the CPU. Only happens if there is a driver bug.
|
|
|
|
2005-05-14 00:07 davidm
|
|
|
|
* Config.in, Kconfig, Makefile, crypto.c, fips.c, fips.h, random.c,
|
|
ixp4xx/ixp4xx.c, tools/bench-ocf:
|
|
|
|
PKE and RNG support running on the ixp driver, added PKE bench
|
|
marking to script. Still some multi-thread problems in the PKE
|
|
code.
|
|
|
|
Added FIP RNG checking option to config and code.
|
|
|
|
2005-05-10 19:18 davidm
|
|
|
|
* Makefile, ixp4xx/ixp4xx.c:
|
|
|
|
Get the OCF stuff building for the 465 and CSR-2.0
|
|
|
|
2005-04-27 19:18 davidm
|
|
|
|
* cryptodev.h, random.c, hifn/hifn7751.c, safe/safe.c:
|
|
cleanup the random number interface some more
|
|
|
|
2005-04-27 00:57 davidm
|
|
|
|
* cryptodev.h, cryptosoft.c, random.c, hifn/hifn7751.c,
|
|
ixp4xx/ixp4xx.c, patches/linux-2.4.29-add_true_randomness.patch,
|
|
patches/linux-2.6.11-add_true_randomness.patch, safe/safe.c,
|
|
safe/safevar.h:
|
|
|
|
Switch to a more "user" like random number handling. Drivers no
|
|
longer poll for RNG data, we pull it as needed to fill
|
|
/dev/random's entropy.
|
|
|
|
Implement sk_buff handling within the OCF framework.
|
|
|
|
fixup IV handling in cryptosoft.
|
|
|
|
2005-04-27 00:41 davidm
|
|
|
|
* crypto.c:
|
|
|
|
Fix a race condition with the starting of kernel threads. The
|
|
threads were running before the pid assignment in the parent.
|
|
|
|
2005-03-24 23:57 davidm
|
|
|
|
* Makefile:
|
|
include crypto-tools.patch in the release file
|
|
|
|
|
|
|
|
2005-03-24 20:14 davidm
|
|
|
|
* safe/safe.c:
|
|
Fixup compile time warnings due to some left over BSDisms
|
|
|
|
|
|
2005-03-24 00:53 davidm
|
|
|
|
* Makefile, README, README.sglinux, patches/linux-2.4.29-ocf.patch,
|
|
patches/linux-2.6.11-ocf.patch, patches/ocf-linux-2.4.29.patch,
|
|
patches/ocf-linux-2.6.11.patch:
|
|
added cleaner patch names and a tarball target to aid releases
|
|
|
|
|
|
2005-03-24 00:28 davidm
|
|
|
|
* patches/crypto-tools.patch,
|
|
patches/linux-2.4.29-add_true_randomness.patch,
|
|
patches/linux-2.6.11-add_true_randomness.patch,
|
|
patches/ocf-linux-2.4.29.patch, patches/ocf-linux-2.6.11.patch,
|
|
patches/ssh.patch, patches/ssl.patch, tools/bench-ocf:
|
|
move all the release file patches into CVS for simplicity
|
|
|
|
|
|
2005-03-23 20:37 davidm
|
|
|
|
* safe/safe.c:
|
|
remove excessive debug from RNG routines so that you can turn on
|
|
debug and live through it
|
|
|
|
|
|
|
|
2005-03-23 02:23 davidm
|
|
|
|
* safe/safe.c:
|
|
fix memory corruption for mod_exp and the safenet, we were copying
|
|
back more than the space available.
|
|
|
|
|
|
|
|
2005-03-22 21:45 davidm
|
|
|
|
* crypto.c, cryptodev.c, cryptodev.h, safe/safe.c:
|
|
fixup a major sync issues with key processing (callback called
|
|
before sleeping). Improve its performance while we are there with
|
|
a CBIMM (callback immediate) option.
|
|
|
|
|
|
|
|
2005-03-19 00:33 davidm
|
|
|
|
* random.c:
|
|
A new randomness function for both 2.4 and 2.6 that replaces out
|
|
previous old solution for the hifn driver with more generic code
|
|
that works on both kernels.
|
|
|
|
add_true_randomness(u_int32_t *buf, int nwords);
|
|
|
|
|
|
|
|
2005-03-18 21:01 davidm
|
|
|
|
* Makefile, cryptodev.h, random.c, hifn/hifn7751.c, safe/safe.c:
|
|
RNG support in both the safenet and the hifn plus the required
|
|
kernel support.
|
|
|
|
"hd /dev/random" runs much much faster now :-)
|
|
|
|
|
|
|
|
2005-03-17 23:29 toby
|
|
|
|
* cryptodev.c: Make sure the CIOCASYMFEAT ioctl on
|
|
/dev/crypto copies out the capable features.
|
|
|
|
2005-03-17 01:19 davidm
|
|
|
|
* safe/: safe.c, safereg.h, safevar.h:
|
|
hardware PK acceleration on the safenet (CRK_MOD_EXP only)
|
|
|
|
|
|
2005-03-16 04:28 davidm
|
|
|
|
* criov.c, crypto.c, cryptodev.c, safe/safe.c:
|
|
fixup the FBSD id stuff to compile :-)
|
|
|
|
2005-03-16 04:02 davidm
|
|
|
|
* README, README.sglinux, TODO:
|
|
Updated with versions, removed tabs, new kernel versions, web
|
|
site etc
|
|
|
|
2005-03-16 03:45 davidm
|
|
|
|
* criov.c, crypto.c, cryptodev.c, cryptodev.h:
|
|
more license formatting and version id's to help keep in touch with
|
|
FreeBSD
|
|
|
|
2005-03-16 03:16 davidm
|
|
|
|
* safe/safe.c:
|
|
up to date with FreeBSD versioning, no changes to merge
|
|
|
|
2005-03-16 03:15 davidm
|
|
|
|
* safe/safe.c:
|
|
include FreeBSD version info so I can track changes better
|
|
|
|
|
|
2005-03-16 03:11 davidm
|
|
|
|
* hifn/: hifn7751.c, hifn7751reg.h, hifn7751var.h:
|
|
incorporate latest updates from FreeBSD:
|
|
|
|
| Update support for 795x parts: | o rework pll setup code to
|
|
follow h/w specification | o add hint.hifn.X.pllconfig to specify
|
|
reference clock setup | requirements; default is pci66 which
|
|
means the clock is | derived from the PCI bus clock and the card
|
|
resides in a | 66MHz slot | | Tested on 7955 and 7956 cards;
|
|
support for 7954 cards not enabled | since we have no cards to test
|
|
against.
|
|
|
|
|
|
|
|
2005-03-16 02:50 davidm
|
|
|
|
* Config.in, Kconfig, README, crypto.c, cryptodev.c, cryptodev.h,
|
|
hifn/hifn7751.c, hifn/hifn7751var.h, safe/safe.c, safe/safevar.h:
|
|
cleanups to build and run on 2.6.11 and 2.4.29 for a public release
|
|
|
|
included configs locally to reduce patch to kernel and required
|
|
user effort.
|
|
|
|
pci_dma_sync_single fix from Michele Baldessari
|
|
, with modifications by me to work on all
|
|
kernels.
|
|
|
|
|
|
|
|
2005-03-11 23:30 davidm
|
|
|
|
* Makefile:
|
|
fix up the compiling again, I had outstanding commits for this one
|
|
:-)
|
|
|
|
2005-03-11 21:56 danield
|
|
|
|
* Makefile: Get ocf modules building again.
|
|
|
|
2004-12-25 07:12 davidm
|
|
|
|
* TODO:
|
|
safenet is all good now AKAIK
|
|
|
|
2004-12-25 07:02 davidm
|
|
|
|
* Makefile, crypto.c, cryptodev.c, cryptosoft.c, uio.h:
|
|
2.6 port of the OCF framework, tested on Xscale and compiled for
|
|
x86
|
|
|
|
|
|
|
|
2004-12-10 02:41 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
Fix compilation as l_flags was not defined for LOCK in pci_remove
|
|
|
|
|
|
2004-12-06 19:15 davidm
|
|
|
|
* hifn/hifn7751.c, safe/safe.c:
|
|
* Put locking into hifn_remove to ensure interrupts are not running
|
|
while we remove the driver
|
|
|
|
Use del_timer_sync (need to ensure timer is not running on
|
|
another CPU
|
|
* when we delete it).
|
|
|
|
Improvements suggested by Evgeniy Polyakov <johnpol@2ka.mipt.ru>
|
|
|
|
|
|
2004-12-02 09:16 davidm
|
|
|
|
* README, README.sglinux:
|
|
* Fix up all tabs to be spaces * explain how to update the ocf
|
|
support in the patch to the current version.
|
|
|
|
|
|
|
|
2004-12-02 09:11 davidm
|
|
|
|
* README:
|
|
* fix some spelling/grammar * add more info on the ssl.patch file
|
|
and what it contains
|
|
|
|
2004-12-02 09:08 davidm
|
|
|
|
* README.sglinux:
|
|
give some more instructions on the shar archive and extracting the
|
|
release.
|
|
|
|
2004-12-02 09:03 davidm
|
|
|
|
* README.sglinux:
|
|
how to include crypto-tools into 3.1.6
|
|
|
|
|
|
|
|
2004-12-02 08:48 davidm
|
|
|
|
* README.sglinux:
|
|
updated for a new crypto patch for openssl-0.9.7e
|
|
|
|
2004-12-02 08:04 davidm
|
|
|
|
* README, README.sglinux:
|
|
Clean up the README's to use the new SG Linux alpha and a specific
|
|
2.4.28 patch.
|
|
|
|
|
|
|
|
2004-12-01 23:11 davidm
|
|
|
|
* Makefile, criov.c, crypto.c, cryptodev.c, cryptosoft.c,
|
|
hifn/Makefile, hifn/hifn7751.c, ixp4xx/Makefile, ixp4xx/ixp4xx.c,
|
|
safe/Makefile, safe/safe.c:
|
|
Re-worked the Makefiles so that including the code into a standard
|
|
non-SG kernel is really easy.
|
|
|
|
Fixed a non-initialised bug that was introduce into cryptosoft.c
|
|
with the additional error checking.
|
|
|
|
|
|
|
|
2004-12-01 01:54 davidm
|
|
|
|
* TODO:
|
|
updates based on things that have been fixed.
|
|
|
|
2004-12-01 01:53 davidm
|
|
|
|
* safe/: safe.c, safevar.h:
|
|
Cleanup some old hacks based on the much cleaner port of the hifn
|
|
driver.
|
|
|
|
2004-12-01 01:53 davidm
|
|
|
|
* cryptosoft.c:
|
|
fix some crashes due to bad buffer sizes etc.
|
|
|
|
2004-11-27 09:16 davidm
|
|
|
|
* crypto.c, cryptodev.c, ixp4xx/ixp4xx.c:
|
|
Fixed some nasty problems that were stopping reliable behaviour:
|
|
|
|
1) we were not initialising some of our lists/wait queues, which
|
|
meant they appears to have things in them when in fact they did
|
|
not. This actually didn't seems to cause any problems but is
|
|
extremely bogus.
|
|
|
|
2) While a process was waiting for the crypto engine, if
|
|
itreceived a signal we would lose sync with the engine and end
|
|
up allowing out-of-band actions that were invalid (ie.,
|
|
unregistering a context that was still active in a crypto
|
|
operation).
|
|
|
|
Of source the CryptACC should probably deal with this as well
|
|
;-)
|
|
|
|
|
|
|
|
2004-11-26 01:33 davidm
|
|
|
|
* TODO:
|
|
We should also hook in the random number generators to linux
|
|
|
|
|
|
2004-11-26 01:33 davidm
|
|
|
|
* hifn/hifn7751.c:
|
|
Changed all the accesses to DMS descriptors to not set the valid
|
|
bit until after everything else was set. This got the driver
|
|
running smoothly, along with a fixup to the pci_map_uio which
|
|
wasn't settings lengths correctly.
|
|
|
|
|
|
|
|
2004-11-25 21:15 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
document why using a new context for each packet is actually a
|
|
better idea than allocating one (actually two) per session.
|
|
|
|
|
|
|
|
2004-11-25 08:48 davidm
|
|
|
|
* README, README.sglinux:
|
|
updates from email with Intel to fix a few little things
|
|
|
|
|
|
2004-11-25 00:02 davidm
|
|
|
|
* README, README.sglinux, safe/safe.c:
|
|
Some cleanups of doc and so on for Intel/General use
|
|
|
|
2004-11-23 07:58 davidm
|
|
|
|
* TODO:
|
|
safenet is working on big endian machines now
|
|
|
|
|
|
|
|
2004-11-23 07:56 davidm
|
|
|
|
* ixp4xx/: Makefile, ixp4xx.c:
|
|
Reference the Intel library, cleanup the IV sizes and turn on AES.
|
|
Fix Makefile for new config options.
|
|
|
|
|
|
|
|
2004-11-23 07:52 davidm
|
|
|
|
* Makefile:
|
|
Complete the changes of ixp to ixp4xx (IXP4xx) as appropriate
|
|
|
|
|
|
2004-11-23 00:33 davidm
|
|
|
|
* Makefile, README, ixp4xx/Makefile:
|
|
Changes all references to ixp to be ixp4xx at Intels request
|
|
|
|
|
|
2004-11-20 01:07 davidm
|
|
|
|
* safe/: safe.c, safereg.h:
|
|
fully working safenet on BE machines
|
|
|
|
2004-11-19 01:03 davidm
|
|
|
|
* Makefile, hifn/Makefile, hifn/hifn7751.c, hifn/hifn7751reg.h,
|
|
hifn/hifn7751var.h:
|
|
hifn driver code complete and compiling, needs a test now ;-)
|
|
|
|
|
|
2004-11-18 21:45 davidm
|
|
|
|
* hifn/: Makefile, hifn7751.c, hifn7751var.h:
|
|
Makefile for building the hifn driver
|
|
|
|
2004-11-18 21:44 davidm
|
|
|
|
* hifn/: hifn7751.c, hifn7751reg.h, hifn7751var.h:
|
|
Checkin the orginal freebsd source for the hifn driver as a
|
|
reference in the future.
|
|
|
|
|
|
|
|
2004-11-18 10:05 davidm
|
|
|
|
* Makefile, README, TODO, criov.c, crypto.c, cryptodev.c,
|
|
cryptodev.h, cryptosoft.c, uio.h, ixp4xx/Makefile, ixp4xx/ixp4xx.c,
|
|
safe/Makefile, safe/safe.c, safe/safevar.h:
|
|
Clean up license and copyright info to be more acceptable (and
|
|
present) Clean up debug and trace Fixup memory freeing etc on
|
|
safenet Fix compiler warnings (some were bugs)
|
|
|
|
|
|
|
|
2004-11-17 02:23 davidm
|
|
|
|
* safe/safe.c:
|
|
working on Xscale (big endian) now but packet data is getting
|
|
stuffed up due to endian problems (at least now we are talking to
|
|
the chip correctly for BE). Good enough to test packet throughput,
|
|
no good for testing scp.
|
|
|
|
|
|
|
|
2004-11-17 02:21 davidm
|
|
|
|
* criov.c:
|
|
Make sure public symbols are exported by including the correct
|
|
header files
|
|
|
|
2004-11-17 02:15 davidm
|
|
|
|
* crypto.c:
|
|
even better cleanup of kernel threads on exit
|
|
|
|
2004-11-17 02:15 davidm
|
|
|
|
* cryptosoft.c:
|
|
return some trace to debug so it doesn't appear
|
|
|
|
2004-11-17 02:14 davidm
|
|
|
|
* Makefile:
|
|
Make sure all drivers get built, not just IXP
|
|
|
|
2004-11-16 21:31 davidm
|
|
|
|
* crypto.c:
|
|
Fix problem with reboots and driver not unloading cleanly, we were
|
|
not handling signals correctly in the kernel threads,
|
|
|
|
2004-11-10 10:46 davidm
|
|
|
|
* ixp4xx/ixp4xx.c:
|
|
fix serious context leak, itturns out the context is still
|
|
considered busy while it is calling the perform callback, so we
|
|
cleanup on closing the session and on allocating the next context
|
|
to work around this.
|
|
|
|
|
|
|
|
2004-11-10 05:26 davidm
|
|
|
|
* crypto.c, cryptodev.c, ixp4xx/ixp4xx.c, safe/safe.c:
|
|
cleaned out some debug, found MAX tunnels bug, traced it various
|
|
other cleanups.
|
|
|
|
|
|
|
|
2004-11-10 04:02 davidm
|
|
|
|
* cryptodev.c, cryptosoft.c, ixp4xx/ixp4xx.c, safe/Makefile,
|
|
safe/safe.c:
|
|
Fix up kmalloc usage to always zero resulting buffer everywhere
|
|
(stops crashes in ixp)
|
|
|
|
Add some function debug to ixp so you can see it working
|
|
|
|
Fix safe driver to build and install in a real tree.
|
|
|
|
|
|
|
|
2004-11-10 02:27 davidm
|
|
|
|
* Makefile, criov.c, crypto.c, cryptosoft.c, ixp4xx/Makefile,
|
|
ixp4xx/ixp4xx.c:
|
|
Compiling OCF modules for the IXP crypto, needs testing now
|
|
|
|
|
|
2004-11-09 19:16 davidm
|
|
|
|
* criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
|
|
cryptosoft.h, uio.h, safe/safe.c, safe/safevar.h:
|
|
The linux port of OCF with working safenet and software modules.
|
|
Still some bugs with mutiple crypto threads using the safenet
|
|
driver.
|
|
|
|
|
|
|
|
2004-11-09 18:49 davidm
|
|
|
|
* Makefile, criov.c, crypto.c, cryptodev.c, cryptodev.h,
|
|
cryptosoft.c, cryptosoft.h, uio.h, safe/Makefile, safe/safe.c,
|
|
safe/safereg.h, safe/safevar.h:
|
|
Check in the orginal free-bsd sources for the OCF support. This
|
|
allows us to diff against it later to see if we botched anything
|
|
major league.
|
|
|
|
|
|
|