)]}' { "log": [ { "commit": "17f0f4a47df9aea9ee26c939f8057c35e0be1847", "tree": "d6c7ff6c93573227a49c9e8fe06c53d97950e4e6", "parents": [ "ccb778e1841ce04b4c10b39f0dd2558ab2c6dcd4" ], "author": { "name": "Neil Horman", "email": "nhorman@tuxdriver.com", "time": "Thu Aug 14 22:15:52 2008 +1000" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Aug 29 15:50:04 2008 +1000" }, "message": "crypto: rng - RNG interface and implementation\n\nThis patch adds a random number generator interface as well as a\ncryptographic pseudo-random number generator based on AES. It is\nmeant to be used in cases where a deterministic CPRNG is required.\n\nOne of the first applications will be as an input in the IPsec IV\ngeneration process.\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "5be5e667a9a5d8d5553e009e67bc692d95e5916a", "tree": "a3a64ea1ec9d303a21319ee72579522a5f42a101", "parents": [ "1aa4ecd95d8d67d21731a00646326a71295dafa3" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Sun Aug 17 18:04:30 2008 +1000" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Aug 29 15:50:00 2008 +1000" }, "message": "crypto: skcipher - Move IV generators into their own modules\n\nThis patch moves the default IV generators into their own modules\nin order to break a dependency loop between cryptomgr, rng, and\nblkcipher.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "18e33e6d5cc0495826f5245777cd267732815e01", "tree": "5cf0151630a63c27e06daad39556c423d4e2ef36", "parents": [ "5773a3e6e396d5fd9de58372abe6a86b7e258e3e" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Jul 10 16:01:22 2008 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Jul 10 20:35:18 2008 +0800" }, "message": "crypto: hash - Move ahash functions into crypto/hash.h\n\nAll new crypto interfaces should go into individual files as much\nas possible in order to ensure that crypto.h does not collapse under\nits own weight.\n\nThis patch moves the ahash code into crypto/hash.h and crypto/internal/hash.h\nrespectively.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "20036252fc61c624a49770fb89684ea5cfdfa05e", "tree": "29db0f146bab13b399d0df9e80041fc35a64fc91", "parents": [ "b8454eebe380677789735fd6bad368af2e6b2d1e" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jul 07 22:19:53 2008 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Jul 10 20:35:18 2008 +0800" }, "message": "crypto: hash - Added scatter list walking helper\n\nThis patch adds the walking helpers for hash algorithms akin to\nthose of block ciphers. This is a necessary step before we can\nreimplement existing hash algorithms using the new ahash interface.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "f13ba2f7d3a877967477ec8f64e1dae7a967c7e2", "tree": "58756b15c6f73a455254d45d7296e4fd46442fa2", "parents": [ "2f40a178e70030c4712fe63807c883f34c3645eb" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Sat Mar 08 20:29:43 2008 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Sat Mar 08 20:29:43 2008 +0800" }, "message": "[CRYPTO] skcipher: Fix section mismatches\n\nThe previous patch to move chainiv and eseqiv into blkcipher created\na section mismatch for the chainiv exit function which was also called\nfrom __init. This patch removes the __exit marking on it.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "76fc60a2e3c6aa6e98cd3a5cb81a1855c637b274", "tree": "ab29e31b06045971853ff58bb6fabd6d40fd23c8", "parents": [ "c8620c2590f43eff864fe597fcbe5b72ab7a7b94" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Sat Feb 23 11:12:06 2008 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Sat Feb 23 11:12:06 2008 +0800" }, "message": "[CRYPTO] skcipher: Move chainiv/seqiv into crypto_blkcipher module\n\nFor compatibility with dm-crypt initramfs setups it is useful to merge\nchainiv/seqiv into the crypto_blkcipher module. Since they\u0027re required\nby most algorithms anyway this is an acceptable trade-off.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "e7cd2514ea506f06bd4f7b13a9b62afd60f9c73b", "tree": "66c46a54a2841091165a0b8083329c41f3504847", "parents": [ "4726204200327c04a77b819e2c653c063f1bc6ab" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Dec 14 22:28:14 2007 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:55 2008 +1100" }, "message": "[CRYPTO] chainiv: Avoid lock spinning where possible\n\nThis patch makes chainiv avoid spinning by postponing requests on lock\ncontention if the user allows the use of asynchronous algorithms. If\na synchronous algorithm is requested then we behave as before.\n\nThis should improve IPsec performance on SMP when two CPUs attempt to\ntransmit over the same SA. Currently one of them will spin doing nothing\nwaiting for the other CPU to finish its encryption. This patch makes it\npostpone the request and get on with other work.\n\nIf only one CPU is transmitting for a given SA, then we will process\nthe request synchronously as before.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "3631c650c495d61b1dabf32eb26b46873636e918", "tree": "b46244dc1062fbede37bff4955e205ab7d5310c3", "parents": [ "93cc74e078eed8735585e5687903727bcfbcc8b4" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Dec 13 22:28:59 2007 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:53 2008 +1100" }, "message": "[CRYPTO] null: Add null blkcipher algorithm\n\nThis patch adds a null blkcipher algorithm called ecb(cipher_null) for\nbackwards compatibility. Previously the null algorithm when used by\nIPsec copied the data byte by byte. This new algorithm optimises that\nto a straight memcpy which lets us better measure inherent overheads in\nour IPsec code.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "d29ce988aeb459203c74f14747f4f77e1829ef78", "tree": "886ec0a429c3b1b5b79f290be6b0d8383b89c30b", "parents": [ "14df4d80433b8413f901e80880c39e8759b8418f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Dec 12 19:24:27 2007 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:52 2008 +1100" }, "message": "[CRYPTO] aead: Create default givcipher instances\n\nThis patch makes crypto_alloc_aead always return algorithms that is\ncapable of generating their own IVs through givencrypt and givdecrypt.\nAll existing AEAD algorithms already do. New ones must either supply\ntheir own or specify a generic IV generator with the geniv field.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "5b6d2d7fdf806f2b5a9352416f9e670911fc4748", "tree": "d2eda87839e1b5de18c691ecff6e6074a35c09f0", "parents": [ "aedb30dc49eeecd48558b601c47e0b3f9e42c602" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Dec 12 19:23:36 2007 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:51 2008 +1100" }, "message": "[CRYPTO] aead: Add aead_geniv_alloc/aead_geniv_free\n\nThis patch creates the infrastructure to help the construction of IV\ngenerator templates that wrap around AEAD algorithms by adding an IV\ngenerator to them. This is useful for AEAD algorithms with no built-in\nIV generator or to replace their built-in generator.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "b9c55aa475599183d0eab6833ea23e70c52dd24b", "tree": "74e011e9b95291f230d6e7200730e3bc3b9d7153", "parents": [ "806d183aa6cc565d0f6bd2fb7fc6bfb175cc4813" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Dec 04 12:46:48 2007 +1100" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:46 2008 +1100" }, "message": "[CRYPTO] skcipher: Create default givcipher instances\n\nThis patch makes crypto_alloc_ablkcipher/crypto_grab_skcipher always\nreturn algorithms that are capable of generating their own IVs through\ngivencrypt and givdecrypt. Each algorithm may specify its default IV\ngenerator through the geniv field.\n\nFor algorithms that do not set the geniv field, the blkcipher layer will\npick a default. Currently it\u0027s chainiv for synchronous algorithms and\neseqiv for asynchronous algorithms. Note that if these wrappers do not\nwork on an algorithm then that algorithm must specify its own geniv or\nit can\u0027t be used at all.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "15c67286685cddce207b646306e8819ec8268ede", "tree": "acb9d4e4b0180857112cac88995597c9992be982", "parents": [ "7f47073911f0e4384d38a0827d28305a177c8816" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Nov 30 20:17:28 2007 +1100" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:45 2008 +1100" }, "message": "[CRYPTO] skcipher: Added skcipher_givcrypt_complete\n\nThis patch adds the helper skcipher_givcrypt_complete which should be\ncalled when an ablkcipher algorithm has completed a givcrypt request.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "ecfc43292f68566c144afca966b46b371c26d56c", "tree": "ef332abe1573434836a90e188257a252ca9f896a", "parents": [ "927eead52c958829ef62c8aa5da2751033a2cf98" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Dec 05 21:08:36 2007 +1100" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:44 2008 +1100" }, "message": "[CRYPTO] skcipher: Add skcipher_geniv_alloc/skcipher_geniv_free\n\nThis patch creates the infrastructure to help the construction of givcipher\ntemplates that wrap around existing blkcipher/ablkcipher algorithms by adding\nan IV generator to them.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "61da88e2b800eed2b03834a73c46cc89ad48716d", "tree": "00926f29041a08feefe379f2ce164099d7f82f45", "parents": [ "378f4f51f9fdd8df80ea875320e2bf1d7c6e6e77" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Dec 17 21:51:27 2007 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:43 2008 +1100" }, "message": "[CRYPTO] skcipher: Add givcrypt operations and givcipher type\n\nDifferent block cipher modes have different requirements for intialisation\nvectors. For example, CBC can use a simple randomly generated IV while\nmodes such as CTR must use an IV generation mechanisms that give a stronger\nguarantee on the lack of collisions. Furthermore, disk encryption modes\nhave their own IV generation algorithms.\n\nUp until now IV generation has been left to the users of the symmetric\nkey cipher API. This is inconvenient as the number of block cipher modes\nincrease because the user needs to be aware of which mode is supposed to\nbe paired with which IV generation algorithm.\n\nTherefore it makes sense to integrate the IV generation into the crypto\nAPI. This patch takes the first step in that direction by creating two\nnew ablkcipher operations, givencrypt and givdecrypt that generates an\nIV before performing the actual encryption or decryption.\n\nThe operations are currently not exposed to the user. That will be done\nonce the underlying functionality has actually been implemented.\n\nIt also creates the underlying givcipher type. Algorithms that directly\ngenerate IVs would use it instead of ablkcipher. All other algorithms\n(including all existing ones) would generate a givcipher algorithm upon\nregistration. This givcipher algorithm will be constructed from the geniv\nstring that\u0027s stored in every algorithm. That string will locate a template\nwhich is instantiated by the blkcipher/ablkcipher algorithm in question to\ngive a givcipher algorithm.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "378f4f51f9fdd8df80ea875320e2bf1d7c6e6e77", "tree": "f38f23fa09ec7971546a0a3aa42a79cc055c455f", "parents": [ "84c911523020a2e39b307a2da26ee1886b7214fe" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Dec 17 20:07:31 2007 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Fri Jan 11 08:16:42 2008 +1100" }, "message": "[CRYPTO] skcipher: Add crypto_grab_skcipher interface\n\nNote: From now on the collective of ablkcipher/blkcipher/givcipher will\nbe known as skcipher, i.e., symmetric key cipher. The name blkcipher has\nalways been much of a misnomer since it supports stream ciphers too.\n\nThis patch adds the function crypto_grab_skcipher as a new way of getting\nan ablkcipher spawn. The problem is that previously we did this in two\nsteps, first getting the algorithm and then calling crypto_init_spawn.\n\nThis meant that each spawn user had to be aware of what type and mask to\nuse for these two steps. This is difficult and also presents a problem\nwhen the type/mask changes as they\u0027re about to be for IV generators.\n\nThe new interface does both steps together just like crypto_alloc_ablkcipher.\n\nAs a side-effect this also allows us to be stronger on type enforcement\nfor spawns. For now this is only done for ablkcipher but it\u0027s trivial\nto extend for other types.\n\nThis patch also moves the type/mask logic for skcipher into the helpers\ncrypto_skcipher_type and crypto_skcipher_mask.\n\nFinally this patch introduces the function crypto_require_sync to determine\nwhether the user is specifically requesting a sync algorithm.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" } ] }