diff options
| author | Kornel Duleba <mindal@semihalf.com> | 2021-11-02 11:53:22 +0000 |
|---|---|---|
| committer | Wojciech Macek <wma@FreeBSD.org> | 2021-11-06 08:08:44 +0000 |
| commit | 849faf4e0ba9a8b8f24ff34da93a0fd46c14eda9 (patch) | |
| tree | 6f7d91892e483efe7e7ae4c12f2a75dc94a72562 /sys/conf/files.i386 | |
| parent | 6badb512a94df667f0df1484fb288ece186305bd (diff) | |
| download | src-849faf4e0ba9a8b8f24ff34da93a0fd46c14eda9.tar.gz src-849faf4e0ba9a8b8f24ff34da93a0fd46c14eda9.zip | |
ossl: Add support for AES-CBC cipher
AES-CBC OpenSSL assembly is used underneath.
The glue layer(ossl_aes.c) is based on CHACHA20 implementation.
Contrary to the SHA and CHACHA20, AES OpenSSL assembly logic
does not have a fallback implementation in case CPU doesn't
support required instructions.
Because of that CPU caps are checked during initialization and AES
support is advertised only if available.
The feature is available on all architectures that ossl supports:
i386, amd64, arm64.
The biggest advantage of this patch over existing solutions
(aesni(4) and armv8crypto(4)) is that it supports SHA,
allowing for ETA operations.
Sponsored by: Stormshield
Obtained from: Semihalf
Reviewed by: jhb
Differential revision: https://reviews.freebsd.org/D32099
Diffstat (limited to 'sys/conf/files.i386')
| -rw-r--r-- | sys/conf/files.i386 | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/conf/files.i386 b/sys/conf/files.i386 index e83bcd5a3492..0c681d6a84a0 100644 --- a/sys/conf/files.i386 +++ b/sys/conf/files.i386 @@ -15,6 +15,7 @@ cddl/dev/dtrace/i386/dtrace_asm.S optional dtrace compile-with "${DTRACE_S}" cddl/dev/dtrace/i386/dtrace_subr.c optional dtrace compile-with "${DTRACE_C}" crypto/aesni/aeskeys_i386.S optional aesni crypto/des/arch/i386/des_enc.S optional netsmb +crypto/openssl/i386/aesni-x86.S optional ossl crypto/openssl/i386/chacha-x86.S optional ossl crypto/openssl/i386/poly1305-x86.S optional ossl crypto/openssl/i386/sha1-586.S optional ossl |