1. 22 Jun, 2015 1 commit
    • Herbert Xu's avatar
      crypto: eseqiv - Offer normal cipher functionality without RNG · 055906d1
      Herbert Xu authored
      The RNG may not be available during early boot, e.g., the relevant
      modules may not be included in the initramfs.  As the RNG Is only
      needed for IPsec, we should not let this prevent use of ciphers
      without IV generators, e.g., for disk encryption.
      This patch postpones the RNG allocation to the init function so
      that one failure during early boot does not make the RNG unavailable
      for all subsequent users of the same cipher.
      More importantly, it lets the cipher live even if RNG allocation
      fails.  Of course we no longer offer IV generation and which will
      fail with an error if invoked.  But all other cipher capabilities
      will function as usual.
      Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
  2. 04 Jun, 2015 1 commit
  3. 26 Nov, 2014 1 commit
  4. 01 Aug, 2014 1 commit
  5. 01 Dec, 2010 1 commit
  6. 15 Apr, 2009 1 commit
  7. 28 Aug, 2008 2 commits
  8. 01 May, 2008 1 commit
  9. 08 Mar, 2008 1 commit
  10. 22 Feb, 2008 1 commit
  11. 10 Jan, 2008 1 commit
    • Herbert Xu's avatar
      [CRYPTO] eseqiv: Add Encrypted Sequence Number IV Generator · 806d183a
      Herbert Xu authored
      This generator generates an IV based on a sequence number by xoring it
      with a salt and then encrypting it with the same key as used to encrypt
      the plain text.  This algorithm requires that the block size be equal
      to the IV size.  It is mainly useful for CBC.
      It has one noteworthy property that for IPsec the IV happens to lie
      just before the plain text so the IV generation simply increases the
      number of encrypted blocks by one.  Therefore the cost of this generator
      is entirely dependent on the speed of the underlying cipher.
      Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>