summaryrefslogtreecommitdiff
path: root/crypto/ocf/ChangeLog
diff options
context:
space:
mode:
Diffstat (limited to 'crypto/ocf/ChangeLog')
-rw-r--r--crypto/ocf/ChangeLog1960
1 files changed, 1960 insertions, 0 deletions
diff --git a/crypto/ocf/ChangeLog b/crypto/ocf/ChangeLog
new file mode 100644
index 000000000000..e913ef2890b5
--- /dev/null
+++ b/crypto/ocf/ChangeLog
@@ -0,0 +1,1960 @@
+2008-09-18 01:27 davidm
+
+ * Makefile, README, README.sglinux,
+ patches/linux-2.6.26-natt.patch, patches/linux-2.6.26-ocf.patch,
+ patches/openssl-0.9.8g.patch, patches/openssl-0.9.8i.patch:
+
+ Updates for a new OCF release with openssl-0.9.8i and linux-2.6.26
+ support.
+
+2008-09-18 00:19 davidm
+
+ * Config.in, Kconfig, Makefile, ep80579/Makefile,
+ ep80579/environment.mk, ep80579/icp_asym.c, ep80579/icp_common.c,
+ ep80579/icp_ocf.h, ep80579/icp_sym.c,
+ ep80579/linux_2.6_kernel_space.mk:
+
+ A new driver from Intel for their Intel QuickAssist enabled EP80579
+ Integrated Processor Product Line.
+
+ Adrian Hoban Brad Vrabete
+
+
+2008-07-25 01:01 gerg
+
+ * ocf-compat.h:
+
+ From linux-2.6.26 onwards there is now a linux/fdtable.h include
+ that contains the file_fdtable() definition.
+
+2008-07-05 01:20 davidm
+
+ * Makefile, patches/linux-2.6.25-natt.patch,
+ patches/linux-2.6.25-ocf.patch:
+
+ A new ocf-linux release and some patches to send to the OS guys.
+
+2008-07-03 21:21 davidm
+
+ * crypto.c:
+
+ Clean up a some possible deadlock/busy wait issues with
+ locking/sleeping. This has greatly improved openswan 2.6.14
+ reliability ;-)
+
+ Make more of our state available in /sys for debugging.
+
+2008-06-23 20:38 davidm
+
+ * Config.in, Kconfig:
+
+ Some settings should be bool's John Gumb
+
+2008-05-28 03:43 philipc
+
+ * ixp4xx/ixp4xx.c: Revert previous checkin since the
+ callbacks are meant to complete the crypto request. Before
+ reverting this, CONFIG_DEBUG_SLAB gives: slab error in
+ verify_redzone_free(): cache `ixp4xx_q': double free detected when
+ trying to ssh to the device.
+
+2008-04-27 19:31 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ We were not completing a crypto request under some error
+ conditions.
+
+2008-04-02 01:51 davidm
+
+ * talitos/talitos.c:
+
+ This patch is for crypto/ocf/talitos for use on linux 2.6.23. It
+ is applied to the ocf-linux-20071215 release.
+
+ Signed-off-by: Lee Nipper
+
+2008-02-29 00:43 davidm
+
+ * crypto.c, ocf-compat.h, ixp4xx/ixp4xx.c:
+
+ freshen up the 2.4 support, some recent OCF changes and openswan
+ changes are not that old-os friendly.
+
+ Force OCF to select HW/SW, otherwise it may get stuck on the first
+ device. This change means we will favour HW over SW, but we will
+ use both as required. Passing in a crid of 0 to crypto_newsession
+ effectively meant we were stuck on the first device registered with
+ OCF, not good. This only applied to ipsec, cryptodev already did
+ the right thing.
+
+2008-01-31 07:37 gerg
+
+ * hifn/hifn7751.c:
+
+ The linux-2.6.24 modules build fails if the pci ID table doesn't
+ have a NULL entry at the end. So add one.
+
+2008-01-29 09:16 gerg
+
+ * cryptosoft.c, ocf-compat.h:
+
+ Added some compatability macros for scatterlist changes from 2.6.24
+ onwards.
+
+2007-12-16 07:31 davidm
+
+ * Makefile:
+
+ missed an openssl patch name change
+
+2007-12-16 07:27 davidm
+
+ * Makefile, README, README.sglinux, patches/linux-2.6.23-ocf.patch,
+ patches/openssl-0.9.8e.patch, patches/openssl-0.9.8g.patch,
+ patches/ssl.patch:
+
+ updates for a new ocf release and associated bits
+
+2007-12-16 06:36 davidm
+
+ * crypto.c:
+
+ Be very careful what you do while potentially in an driver unload
+ state or we will call through NULL pointers.
+
+ Reported by Nawang Chhetan .
+
+2007-12-14 22:32 davidm
+
+ * cryptodev.c:
+
+ Add in an unlock_ioctl when available to help SMP systems a lot.
+ Otherwise all ioctls get a BKL :-(
+
+ Problem found by Egor N. Martovetsky
+
+2007-12-14 18:29 davidm
+
+ * cryptosoft.c:
+
+ reformat the alg table to make it easier to read.
+
+2007-12-14 18:29 davidm
+
+ * crypto.c:
+
+ Fix more driver locking/sleeping bugs report by Nawang Chhetan
+
+
+2007-12-12 21:36 davidm
+
+ * Config.in, Kconfig, Makefile, pasemi/Makefile, pasemi/pasemi.c,
+ pasemi/pasemi_fnu.h:
+
+ Here I'm including my PA Semi driver patch to OCF. Please consider
+ it for inclusion into next OCF release.
+
+ Egor N. Martovetsky
+
+2007-12-05 00:37 davidm
+
+ * patches/: linux-2.4.35-ocf.patch, linux-2.6.22-ocf.patch:
+
+ More correct count setting if we get a signal
+
+ Adrian Hoban
+
+2007-12-05 00:02 davidm
+
+ * random.c:
+
+ OCF has a static array for holding random data. The random number
+ generator I have can write directly into physically contiguous
+ memory. Static memory comes from the heap and isn't physically
+ contiguous. I could use kmalloc'd memory and then copy into the OCF
+ static buf but I'd like to avoid a memory copy. The following patch
+ (Physically_Contig_Rand.patch) allows me to avoid a memory copy and
+ should not impact the other OCF drivers:
+
+ Adrian Hoban
+
+2007-12-05 00:01 davidm
+
+ * Kconfig:
+
+ Fix a typo in the Kconfig
+
+2007-11-23 19:15 davidm
+
+ * talitos/talitos_dev.h:
+
+ fix the DPRINTF macro so that it actually compiles.
+
+2007-11-22 19:41 davidm
+
+ * ocf-compat.h, talitos/talitos.c, talitos/talitos_dev.h:
+
+ Various updates to get talitos compiling and work on real-world (ie
+ ubuntu) kernels.
+
+2007-11-08 02:21 davidm
+
+ * crypto.c:
+
+ keep and eye on us being completely blocked. If we have Q's to
+ process, but all the requests are blocked, sleep. We do not want
+ to busy loop until a driver unblocks as it uses valuable CPU
+ resources that could be doing something much more important ;-)
+
+2007-11-07 19:04 davidm
+
+ * hifn/hifn7751.c:
+
+ hifn driver was failing to unblock itself under some "out of
+ resources" conditions. It would return ERESTART to signal it was
+ full but never call crypto_unblock to start things moving again.
+
+2007-11-06 02:09 davidm
+
+ * hifn/hifn7751.c:
+
+ Remove some bogus trace left in the driver for the overflow (too
+ busy) case.
+
+2007-10-12 21:10 gerg
+
+ * crypto.c, ixp4xx/ixp4xx.c:
+
+ Fix up use of kmem_cache_create() - it takes one less argument in
+ 2.6.23 onwards.
+
+2007-10-03 02:41 gerg
+
+ * ixp4xx/Makefile:
+
+ The directory locations for includes in CSR-2.4 is different. Need
+ to modify the CFLAGS accordingly if using CSR-2.4.
+
+2007-09-22 00:39 philipc
+
+ * ixp4xx/Makefile: linux 2.4 make dep was failing. This is
+ a quick fix to get it building, need to double check this.
+
+2007-09-19 00:13 mmccreat
+
+ * Config.in: Add config option CONFIG_OCF_IXP4XX_SHA1_MD5,
+ that enables SHA1 and MD5 hashing to be done by the IXP4xx crypto
+ accelerator (although it is much slower than using cryptosoft).
+
+2007-09-18 21:45 mmccreat
+
+ * Makefile, random.c: - Force the inclusion of autoconf.h,
+ which contains #defines for CONFIG_xxx options for OCF. -
+ Removing additional -D option, now that we are including the
+ CONFIG_xxx #defines.
+
+2007-09-18 21:44 mmccreat
+
+ * Kconfig: Add config option CONFIG_OCF_IXP4XX_SHA1_MD5,
+ that enables SHA1 and MD5 hashing to be done by the IXP4xx crypto
+ accelerator (although it is much slower than using cryptosoft).
+
+2007-09-18 21:37 mmccreat
+
+ * cryptodev.h: The CRYPTO_MAX_DATA_LEN limit should be
+ 0xFFFF ie 64K - 1.
+
+2007-09-18 21:19 mmccreat
+
+ * ixp4xx/ixp4xx.c: - Rework the code so that the correct IXP
+ function, ixCryptoAccHashPerform(), is used to calculate SHA1 and
+ MD5 hashes. NB: The performance of using the IXP4xx hardware is
+ really, really poor compared to using cryptosoft (and the kernel
+ crypto). - Only support SHA1 and MD5 hashing if the
+ CONFIG_OCF_IXP4XX_SHA1_MD5 is enabled.
+
+2007-08-30 21:42 davidm
+
+ * Makefile:
+
+ do not archive build files in the crypto-tools archive
+
+2007-08-22 19:19 mmccreat
+
+ * cryptodev.c: Fix up the checking for key lengths, when the
+ key can be of unlimited size.
+
+2007-08-16 01:50 davidm
+
+ * Makefile:
+
+ Better 2.4 compat for "make dep" now working with fastdep.
+
+2007-07-28 08:25 davidm
+
+ * Makefile, README, README.sglinux, patches/crypto-tools.patch,
+ patches/linux-2.4.29-ocf.patch, patches/linux-2.4.35-ocf.patch,
+ patches/linux-2.6.11-ocf.patch, patches/linux-2.6.22-ocf.patch,
+ patches/ssl.patch:
+
+ Update all the patches and put the patch making target back into
+ the Makefile.
+
+2007-07-28 08:25 davidm
+
+ * hifn/hifn7751.c:
+
+ fix an unused variable warning when HARVESTING is disabled
+
+2007-07-27 21:33 davidm
+
+ * hifn/hifn7751.c, ixp4xx/ixp4xx.c, safe/safe.c, talitos/talitos.c:
+
+
+ Remove all the random code if OCF does not have radom harvesting
+ enabled.
+
+2007-07-26 00:36 davidm
+
+ * Kconfig, hifn/hifnHIPP.c, hifn/hifnHIPPvar.h:
+
+ Changes to get the hifn HIPP stub driver to build.
+
+2007-07-25 21:25 davidm
+
+ * Makefile, hifn/Makefile, hifn/hifnHIPP.c, hifn/hifnHIPPreg.h,
+ hifn/hifnHIPPvar.h, ixp4xx/Makefile, ocfnull/Makefile,
+ safe/Makefile, talitos/Makefile:
+
+ Bring in the hifnHIPP driver written by Xelerance. This is the
+ super hifn chip with full protocol offload.
+
+ Switch to much more traditional Makefile/subdir building. The
+ Makefiles are nicer now, but still not beautiful, 2.6 and 2.4
+ capable builds result in a certain amount of uglyiness.
+
+2007-07-24 21:46 davidm
+
+ * cryptodev.c:
+
+ Clean up all the driver id checking and session management so
+ adding/removing drivers all continues to run cleanly.
+
+2007-07-24 20:14 davidm
+
+ * talitos/talitos.c:
+
+ From: Ahsan Kabir
+
+ less than .1% packet corruption was detected using the talitos
+ driver. It turns out we don't need the cipher iv out len/ptr field
+ to do ESP IPsec. Therefore we set the len field as 0, which tells
+ the SEC not to do anything with this len/ptr field.
+
+ Signed-off-by: Ahsan Kabir
+ Signed-off-by: Kim Phillips
+
+2007-07-24 08:25 davidm
+
+ * cryptosoft.c, ocf-bench.c, hifn/hifn7751.c, ixp4xx/ixp4xx.c,
+ safe/safe.c, talitos/talitos.c:
+
+ Switch the remaining GFP_ATOMIC to the newer and not deprecated
+ SLAB_ATOMIC
+
+2007-07-23 22:16 mmccreat
+
+ * ixp4xx/ixp4xx.c: Add missing ";" from end of dprintk()
+ call!
+
+2007-07-21 01:16 davidm
+
+ * ocf-compat.h, rndtest.c, hifn/hifn7751.c, safe/safe.c:
+
+ pci_register_driver is nothing like it is depending on the kernel,
+ so we need a compat function to fix it up for all kernels before
+ 2.6.10, and in different ways for older and not so older versions.
+
+2007-07-20 21:54 davidm
+
+ * safe/safe.c:
+
+ Make the debug macro ';' safe so you do not get compiler warnings
+
+2007-07-20 21:53 davidm
+
+ * talitos/: talitos.c, talitos_dev.h, talitos_soft.h:
+
+ update to the latest FreeBSD driver structure and fix up the code
+ as required.
+
+2007-07-20 03:07 davidm
+
+ * rndtest.c:
+
+ more headers needed to compile on 2.4
+
+2007-07-20 03:00 davidm
+
+ * cryptosoft.c:
+
+ Put in the 2.4 stubs to support compression
+
+2007-07-20 02:53 davidm
+
+ * crypto.c, ocf-compat.h:
+
+ move some more compat stuff into the compat header.
+
+2007-07-20 02:47 davidm
+
+ * talitos/talitos.c:
+
+ support of_platform_driver for newer, ARCH=powerpc based kernels.
+ Signed-off-by: Kim Phillips
+
+2007-07-20 02:46 davidm
+
+ * talitos/talitos.c:
+
+ From: Ahsan Kabir
+
+ When Talitos completes job both the channel and execution unit are
+ capable of generating interrupts. Talitos used to take two
+ interrupts per request - one for channel completion and the other
+ for execution unit completion. This patch ensures that Talitos
+ takes interrupt only for channel completion. Execution unit will
+ generate interrupt only when there is error and the error
+ interrupts for execution units are not masked.
+
+ Signed-off-by: Ahsan Kabir
+ Signed-off-by: Kim Phillips
+
+2007-07-20 02:37 davidm
+
+ * cryptodev.c:
+
+ Unless the user specifies, select from both HW and SW.
+
+ Clean up some debug to report the actual ioctl name.
+
+ Compiler warning on newer compilers.
+
+2007-07-20 02:35 davidm
+
+ * cryptodev.h:
+
+ moved dprintk to the compat code, seemed nicer in there.
+
+2007-07-20 02:35 davidm
+
+ * rndtest.c:
+
+ Need to clean up some warnings etc, more includes
+
+2007-07-20 02:34 davidm
+
+ * ocf-compat.h, hifn/hifn7751.c, safe/safe.c:
+
+ new shared IRQ flags for 2.6.22 and a safer version of the debug
+ macro
+
+2007-07-20 00:52 davidm
+
+ * cryptosoft.c:
+
+ Implement compression based on the code from the openswan guys.
+
+2007-07-20 00:52 davidm
+
+ * criov.c:
+
+ Fix compiler warning on non-value returning void func.
+
+2007-07-18 22:55 davidm
+
+ * hifn/hifn7751.c, safe/safe.c:
+
+ Use pci_register_driver rather than pci_module_init.
+ pci_module_init has been dropped in 2.6.22 yet pci_register_driver
+ has always existed and used to do some crazy hotplug junk.
+
+2007-07-18 21:55 gerg
+
+ * ixp4xx/ixp4xx.c:
+
+ Added a missing ";" at the end of the ixp_kproces() prototype. It
+ is IXP465 specific, only showed up when generateing for SG720.
+
+2007-07-17 00:37 davidm
+
+ * Makefile, cryptodev.c, random.c, rndtest.c, hifn/hifn7751.c,
+ ocfnull/ocfnull.c, safe/safe.c:
+
+ Fixup all the debug support for 2.4 kernels, clean up the entropy
+ harvester to be far more robust.
+
+2007-07-14 02:19 davidm
+
+ * talitos/talitos.c:
+
+ Old patch that had not been applied Kim Phillips
+
+
+2007-07-14 01:12 davidm
+
+ * Config.in, Kconfig, Makefile, cryptodev.c, cryptodev.h, random.c,
+ syscall.h:
+
+ Finally ditched all the syscall stuff. You can now enable/disable
+ the random harvestor. Pulled in most of random.c from openswan
+ project and fixed some obvious bugs (that were always there).
+
+2007-07-13 21:59 davidm
+
+ * ocf-compat.h:
+
+ Better error printing and checking for drivers
+
+2007-07-13 21:56 davidm
+
+ * cryptosoft.c:
+
+ Fix some incorrect debug (reporting wrong error type)
+
+2007-07-13 21:55 davidm
+
+ * hifn/hifn7751.c, safe/safe.c:
+
+ Make the code more similar to Free-BSD by reverting to the same
+ debug macros
+
+2007-07-13 21:53 davidm
+
+ * ocfnull/ocfnull.c:
+
+ Fix up the null driver to work again in the new framework.
+
+2007-07-06 23:54 mmccreat
+
+ * cryptodev.c, cryptodev.h, cryptosoft.c: - Update OCF to
+ work with new Crypto API introduced in 2.6.19 kerneli, and add
+ macros so it work with older kernels. - Add support for SHA256,
+ SHA384 and SHA512 HASH and HMAC algorithms. - Cryptosoft: Only
+ register algorithms that the kernel has implementations for.
+
+2007-07-03 19:52 davidm
+
+ * Kconfig, README, README.sglinux, criov.c, crypto.c, cryptodev.c,
+ cryptodev.h, cryptosoft.c, ocf-bench.c, ocf-compat.h, random.c,
+ rndtest.c, uio.h, hifn/hifn7751.c, hifn/hifn7751reg.h,
+ hifn/hifn7751var.h, ixp4xx/ixp4xx.c, ocfnull/ocfnull.c,
+ safe/safe.c, safe/safevar.h, talitos/talitos.c:
+
+ Updated OCF to the lastest FreeBSD version.
+
+ There was a lot of change in here, some of which will help FIP's,
+ some which won't.
+
+ Did lots of cleaning and diff reduction against the freebsd code.
+ Still more cleaning to do.
+
+2007-06-01 21:58 gerg
+
+ * Config.in:
+
+ Put the regular old Config.in back, needed for puclic releases.
+
+2007-06-01 21:58 gerg
+
+ * Kconfig:
+
+ Change the CONFIG_OCF_IXP400 dependencies to be the same as they
+ where in the Config.in file.
+
+2007-05-28 21:40 gerg
+
+ * Config.in, Kconfig:
+
+ Switch all module configuration over to new style Kconfigs.
+
+2007-05-24 18:49 davidm
+
+ * cryptodev.c, random.c:
+
+ Work around some problems on redhat systems with errno redefinition
+
+2007-04-30 21:09 gerg
+
+ * cryptosoft.c:
+
+ The CRYPTO_TFM_MODE_ family of defines no longer exists from 2.6.21
+ onwards. As far as I can tell you don't need to pass it to the
+ crypto_alloc_tfm() function anymore.
+
+ So define it to be 0 if it doesn't exist.
+
+2007-04-03 02:13 gerg
+
+ * syscall.h:
+
+ Added syscall macros for SH architecture. Just temporary, 'till
+ Dave fixes the OCF code to not use syscalls from the modules :-)
+
+2007-02-16 23:10 davidm
+
+ * syscall.h:
+
+ ensure the temprary 2.6 fix doesn't break 2.4
+
+2007-02-07 22:23 gerg
+
+ * cryptodev.c, random.c, syscall.h:
+
+ Temporary fix for new 2.6 kernels no longer defining in-kernel
+ system call functions. Define them locally for now until we fix
+ properly.
+
+2007-02-07 03:10 gerg
+
+ * ixp4xx/ixp4xx.c:
+
+ Changes to support the different INIT_WORK() mechanism from kernels
+ 2.6.20 onwards.
+
+2007-02-06 02:38 gerg
+
+ * crypto.c:
+
+ Cleaned up use of kmem_cache_t and use of SLAB_ATOMIC.
+
+2006-12-05 20:50 cpascoe
+
+ * hifn/hifn7751.c, safe/safe.c, talitos/talitos.c:
+
+ Remove pt_regs from OCF interrupt handlers for 2.6.19+
+
+2006-12-02 03:36 gerg
+
+ * criov.c, crypto.c, cryptodev.c, cryptosoft.c, ocf-bench.c,
+ random.c, rndtest.c, hifn/hifn7751.c, ixp4xx/ixp4xx.c,
+ ocfnull/ocfnull.c, safe/safe.c, talitos/talitos.c:
+
+ Can no longer include linux/config.h as of 2.6.19 kernels. Need to
+ conditionally include it based on AUTOCONF_INCLUDED not being
+ defined.
+
+2006-10-13 21:52 cpascoe
+
+ * random.c:
+
+ Remove another race condition that may result in us running more
+ than one random thread if modules are reloaded during heavy system
+ load.
+
+2006-10-13 21:18 cpascoe
+
+ * random.c:
+
+ - Permit delivery of SIGKILL to the random thread. - Do not exit
+ prematurely if poll() is interrupted. - Improve exit conditions so
+ that we quit immediately, rather than loop infinitely, if the
+ last RNG source is removed while we are trying to fill our
+ buffer.
+
+2006-10-03 20:28 cpascoe
+
+ * crypto.c, crypto.c: AutoMerged
+ >
+ > Zero the empty half of "new driver" buffer, and not past the end
+ of the old
+ > buffer that we are about to free.
+
+2006-10-03 20:28 cpascoe
+
+ * crypto.c:
+
+ Zero the empty half of "new driver" buffer, and not past the end of
+ the old buffer that we are about to free.
+
+2006-08-25 23:57 davidm
+
+ * cryptosoft.c:
+
+ Do not print errors for failed ALG requests unless debugging
+
+2006-07-14 21:44 davidm
+
+ * cryptodev.h:
+
+ 2.6.11 and earlier did not have the files_fdtable macro.
+
+2006-06-21 21:26 gerg
+
+ * cryptodev.h, hifn/hifn7751.c, ocfnull/ocfnull.c, safe/safe.c,
+ talitos/talitos.c:
+
+ Fixed up more occurrances of MODULE_PARM() needing to be converted
+ to module_param() (as of 2.6.17 and onwards).
+
+2006-06-21 00:28 gerg
+
+ * cryptosoft.c:
+
+ Change use of MODULE_PARM to module_param() for 2.6.17+ kernels.
+
+2006-06-20 22:13 gerg
+
+ * crypto.c, cryptodev.c, cryptodev.h, ocf-bench.c, ixp4xx/ixp4xx.c:
+
+
+ As of 2.6.17 and onwards module_param is used in place of
+ MODULE_PARM.
+
+2006-06-06 00:31 gerg
+
+ * Makefile:
+
+ Fix Makefile to find includes is using CSR-2.1.
+
+2006-05-31 01:44 gerg
+
+ * cryptodev.h:
+
+ The vars "crypto_usercrypto", "crypto_userasymcrypto" are declared
+ as extern in the header file, but static in the c file. I guessed
+ that they should probably be truely static, so removed the extern
+ declarations from the header.
+
+2006-05-25 21:06 davidm
+
+ * talitos/talitos.c:
+
+ This fixes a situation that I never provably experienced, where a
+ descriptor in memory may be reserved within the proper lock, and
+ freed immediately after, only for a few cycles, right outside the
+ lock. Kim Phillips
+
+2006-05-15 19:49 davidm
+
+ * criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
+ ocf-bench.c, random.c, rndtest.c, uio.h, ixp4xx/ixp4xx.c:
+
+ Remove the "all rights reserved" from the Intel copyrights.
+
+2006-05-12 21:19 davidm
+
+ * Config.in, Kconfig, Makefile, cryptodev.c, ocf-bench.c,
+ ocfnull/ocfnull.c:
+
+ Add in a null OCF driver that does nothing at all, useful for
+ measuring the cost of various parts of the ipsec stack.
+
+2006-05-12 21:17 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ make sure we do not overwrite a correctly set error type.
+
+2006-05-12 06:52 davidm
+
+ * crypto.c:
+
+ Fix a problem where a driver would return ERESTART (full) but then
+ unblock itself before the upper layer had marked it as blocked.
+ This caused the code to get stuck in crypto_proc and process no
+ more requests.
+
+2006-05-12 06:47 davidm
+
+ * cryptosoft.c:
+
+ Implement CRD_F_KEY_EXPLICIT for cryptosoft so keys can be changed
+ on an active session.
+
+2006-05-10 20:09 davidm
+
+ * README, criov.c, crypto.c, cryptodev.h, cryptosoft.c,
+ ocf-bench.c, random.c, rndtest.c, uio.h, hifn/hifn7751.c,
+ ixp4xx/ixp4xx.c, safe/safe.c, safe/safevar.h:
+
+ update email addresses and other house cleaning
+
+2006-05-10 20:08 davidm
+
+ * cryptodev.c:
+
+ pull in better error checking from openswan modifications
+
+2006-05-10 19:11 davidm
+
+ * cryptosoft.c:
+
+ Fix an unused variable warning when various options are disabled.
+
+2006-05-10 19:10 davidm
+
+ * cryptodev.h:
+
+ Add support for 2.4 kernels for the new FD cloning operation
+
+2006-05-09 19:48 davidm
+
+ * hifn/hifn7751.c:
+
+ remove the hifn 7855 support, this driver will never work with
+ that chip.
+
+2006-05-08 23:34 davidm
+
+ * hifn/hifn7751var.h:
+
+ Contiguous buffer support so that ocf-bench can run properly.
+
+2006-05-05 23:21 davidm
+
+ * hifn/hifn7751.c:
+
+ Add in contiguous buffer support so that ocf-bench and run on the
+ driver.
+
+2006-05-05 23:14 davidm
+
+ * ocf-bench.c:
+
+ Our requests were out of order, need to do crypto then auth on
+ encrypt requests. Some drivers enforce this.
+
+2006-05-04 23:21 davidm
+
+ * crypto.c:
+
+ Do not run "newsession" with lock, since newsession may sleep on
+ some targets. Handle the accounting so that things are not pulled
+ from underneath us.
+
+2006-05-04 23:20 davidm
+
+ * cryptodev.c:
+
+ Switch to a less optimal (marginally) solution for creating a new
+ fd that appears to work in far more versions of the kernel
+ including 64bit versions.
+
+2006-05-04 18:54 davidm
+
+ * ocf-bench.c:
+
+ Turn off the IXP access lib benchmarking by default as most people
+ don't have it.
+
+ Paul Wouters
+
+2006-04-01 08:23 davidm
+
+ * Makefile:
+
+ Remove more temp files when cleaning
+
+2006-04-01 08:12 davidm
+
+ * hifn/hifn7751reg.h:
+
+ 7855 PCI id's as yet untested
+
+2006-04-01 08:08 davidm
+
+ * hifn/hifn7751.c:
+
+ add PCI id's for the 7855 and AES support, card is untested still
+ as it requires 128MB of PCI memory !
+
+2006-03-31 08:38 davidm
+
+ * README.sglinux:
+
+ small update to instructions with corrected patch name
+
+2006-03-31 00:23 davidm
+
+ * Config.in:
+
+ Add the Talitos driver to the 2.4 config, even though it probably
+ won't compile.
+
+2006-03-30 07:48 davidm
+
+ * Kconfig, Makefile, talitos/talitos.c, talitos/talitos_dev.h,
+ talitos/talitos_soft.h:
+
+ Please find attached the freescale SEC driver for OCF. It's been
+ (most recently) tested on an SEC2.0 based MPC8541E
+ (cryptographically identical to the MPC8555E) under 2.6.15.2, with
+ openssl-0.9.8a and openswan-2.4.3 (2.4.5rc5 won't keep the security
+ association up for me for some reason).
+
+ Please feel free to add it to your next release of OCF-Linux :-)
+
+ Kim Phillips
+
+2006-03-20 19:34 davidm
+
+ * safe/: safe.c, safevar.h:
+
+ Safenet 1141 v1.0 chips have a DMA lockup error if you access the
+ chip while DMA'ing. As a work around you need to limit your DMA to
+ 256 byte chunks using scatter/gather descriptors. All the SG/SME
+ products have v1.0 chips and would lockup with more than two
+ outstanding packets at one time.
+
+ Fix the KASSERT macro
+
+ Add some more exhaustive initialisation.
+
+2006-03-15 21:58 davidm
+
+ * cryptodev.h, random.c:
+
+ Switch random support to "ints" since that is what the kernel uses
+ and not using the same thing is 64bit wise a bad idea.
+
+ Fix FIP's code to ensure correct amount of data is passed in.
+
+ Add work around for broken 64bit OS RNG support (disable it)
+
+ General code cleanups.
+
+2006-03-15 21:55 davidm
+
+ * hifn/hifn7751.c:
+
+ Fixes for 64bit OS's, make sure PCI address are within bus space,
+ make sure we order writes to the bus so that chip functions
+ correctly. Some small cleanups.
+
+2006-03-15 21:48 davidm
+
+ * hifn/hifn7751var.h:
+
+ Remove unused field from structure
+
+2006-03-15 21:47 davidm
+
+ * safe/safe.c:
+
+ Make the code more 64bit OS compatible, force PCI address space
+ and so on.
+
+2006-03-09 20:42 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ If we call ixpCryptoAccInit() and it fails, just assume that it
+ has already been called. This allows our "rc" scripts to be
+ openswan and freeswan compatible ore easily.
+
+2006-02-28 23:21 davidm
+
+ * README:
+
+ generalise it a bit so rel-dates don't get in the way
+
+2006-02-28 01:52 davidm
+
+ * README, patches/ssh.patch, patches/ssl.patch:
+
+ Updated the README and patches for a release
+
+2006-02-25 09:21 davidm
+
+ * README, README.sglinux:
+
+ updates for a new release of OCF, ssl patches and so on.
+
+2006-02-25 08:44 davidm
+
+ * crypto.c:
+
+ We were calling the "process"routines with interrupts disabled. I
+ can see no good reason for this and it provokes badness warnings in
+ 2.6 under some conditions.
+
+ I am going to run with the Q's unlocked for processing, and
+ hopefully it will allow the system to be more responsive. It
+ hasn't affected ipsec throughput in any way. Userland throughput
+ (multi threaded) may have improved significantly though, but it
+ needs more testing.
+
+2006-02-24 23:32 davidm
+
+ * cryptodev.c:
+
+ Whoa, set the segments with uninitted values can't be good. Clean
+ out the rest of the old code that was accidently left in.
+
+2006-02-22 01:02 davidm
+
+ * cryptodev.c:
+
+ Still not sure about this one, but this is working for all the
+ cases I can see so far. If it gets weird, I am going to switch to
+ a simple clone and chain the sessions rather than a new fcr per fd.
+
+2006-02-20 22:12 davidm
+
+ * cryptodev.c:
+
+ Error handling case could free data that was not allocated
+
+ Ronen Shitrit Marvell Semiconductor Israel
+ Ltd
+
+2006-02-20 21:57 davidm
+
+ * cryptosoft.c:
+
+ Proper SHA/MD5 (non hmac) implementation, remove some retrictions
+ for hashes (which only applied to crypto) and fix over zealous
+ error checking.
+
+ Ronen Shitrit Marvell Semiconductor Israel
+ Ltd
+
+2006-02-09 21:15 davidm
+
+ * cryptodev.c:
+
+ The code wasn't quite right and needed some fixing for proper file
+ accounting.
+
+2006-01-24 20:08 davidm
+
+ * crypto.c, cryptodev.c, hifn/hifn7751.c:
+
+ We implement our own open in the CRIOGET ioctl now which does
+ pretty much the same thing as the BSD version, rather than use an
+ open system call which gets caught out by chroot.
+
+2006-01-06 00:42 gerg
+
+ * cryptosoft.c:
+
+ Moved "{" block marker inside the set of
+ "defined(CONFIG_CRYPTO_HMAC) || defined(CONFIG_CRYPTO_HMAC_MODULE)"
+ code (in function swcr_process) so that it compiled if these where
+ not defined.
+
+2005-11-11 01:44 davidm
+
+ * Makefile, README:
+
+ cleanups for a general release of OCF
+
+2005-11-11 01:18 davidm
+
+ * patches/ssl.patch:
+
+ Updated the ssl patch to the latest and greatest changed we have
+ made.
+
+2005-11-10 21:41 davidm
+
+ * Makefile, ixp4xx/ixp4xx.c:
+
+ Better debug for bad input.
+
+ Have make clean do more cleaning and less talking.
+
+2005-11-03 20:53 davidm
+
+ * cryptosoft.c:
+
+ clean up some compilation errors with various options on/off
+
+2005-10-25 00:25 davidm
+
+ * Makefile:
+
+ Add a patch target that generates full kernel patches to add OCF
+ into either a 2.4 or 2.6 kernel as a single patch.
+
+2005-10-25 00:24 davidm
+
+ * Kconfig:
+
+ Make sure all OCF settings depend on OCF_OCF
+
+2005-09-23 02:45 davidm
+
+ * README, README.sglinux:
+
+ new crypto-tools archive to keep the tools up to date
+
+2005-09-23 02:08 davidm
+
+ * Makefile, README, README.sglinux:
+
+ updates for doing OCF releases
+
+2005-09-23 01:59 davidm
+
+ * patches/: ssh.patch, ssl.patch:
+
+ updated the patches for the latest in fixes etc to ssh/ssl for a
+ new OCF release before the openswan 2.4.1 merge.
+
+2005-09-21 00:57 davidm
+
+ * Makefile, cryptosoft.c, hifn/hifn7751.c, ixp4xx/ixp4xx.c:
+
+ Fixes for building cleanly under 2.6
+
+2005-09-13 23:11 davidm
+
+ * ocf-bench.c:
+
+ Add an exit function for cleaner 2.6 support. Patch from Ronen
+ Shitrit
+
+2005-07-30 00:23 davidm
+
+ * cryptosoft.c:
+
+ Add proper hooks for MD5/SHA and their HMAC countrparts processing
+ from cryptodev.
+
+2005-07-29 01:50 davidm
+
+ * cryptodev.c:
+
+ cryptodev did not support MD5 and SHA1, only the HMAC versions
+
+2005-07-29 01:05 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ register for MD5, return 16 bytes for MD5 and 12 for MD5_HMAC,
+ likewise for SHA1 (only 20 is not HMAC).
+
+2005-07-28 21:52 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ First pass fix of userland MD5 processing. We now do as well as
+ the safenet does, I think.
+
+2005-07-27 06:23 davidm
+
+ * cryptodev.c:
+
+ udelay doesn't give up the current thread, thus the kernel will get
+ locked if a process is killed but the hardware never completes the
+ crypto request.
+
+2005-07-22 02:07 davidm
+
+ * crypto.c, cryptodev.h:
+
+ Implement queuing limits for input/output and OCF requests.
+
+ Implement 2.6 style work queues instead of the 2.4 task_queues.
+
+2005-07-21 20:42 davidm
+
+ * cryptodev.h, ocf-bench.c, ixp4xx/ixp4xx.c:
+
+ Fix OCF to use work queues, add 2.4 version of work queues to
+ cryptodev.h for use in ipsec and elsewhere.
+
+ Problem and initial patch provided by David Vrabel
+ . Cleaned up and 2.4 support added by me.
+
+2005-07-21 19:08 davidm
+
+ * random.c:
+
+ Fix spinlock initialisation, problem reported by Andy @
+ windsorcarclub.co.uk.
+
+2005-07-20 20:24 davidm
+
+ * cryptodev.c:
+
+ fix a silly spelling mistake
+
+2005-07-08 00:56 gerg
+
+ * Makefile:
+
+ Only build ocf-bench when CONFIG_OCF_BENCH is acrually enabled.
+
+2005-06-27 20:29 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ Ok, we need a simple implentation here or we go too slow for UDP
+ tests. For now, if the Q is full just ditch the packet, someone
+ has to do it.
+
+2005-06-25 01:13 davidm
+
+ * safe/safe.c:
+
+ bytes swapping etc all seems wrong for safenet on BE, these fixes
+ see both MD5 and SHA1 working with OpenSwan.
+
+2005-06-22 23:10 davidm
+
+ * random.c:
+
+ clean up some ifdef code a little
+
+2005-06-22 21:28 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ Make sure we do not call blocking functions from ISR callable
+ routines. In this case we were calling ixCryptoAccCtxUnregister.
+
+ Run all the random numbers through SHA1 process to ensure more
+ uniform distribution of bits (NOTE: it is not more random in any
+ way)
+
+2005-06-21 00:11 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ do not process requests from the register callback, gets the AES
+ code all messed up.
+
+ Align caches on HW cache boundaries ot improve speed.
+
+ More tracking or potential errors.
+
+2005-06-15 01:55 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ technically ixCryptoAccCtxRegister cannot be called from IRQ
+ context, so run it from the immediate BH.
+
+2005-06-14 23:13 davidm
+
+ * ocf-bench.c:
+
+ Fix some compile warnings/errors
+
+2005-06-14 20:52 davidm
+
+ * Config.in, Kconfig, Makefile, ocf-bench.c:
+
+ Add in kernel benchmark driver
+
+ Support for building under CSR 1.4 and 2.0 is now complete
+
+2005-06-14 20:51 davidm
+
+ * crypto.c:
+
+ Do not use immediate processing for SW drivers otherwise we hold a
+ lock for too long. Instead force BATCH processing.
+
+ Problem found by David Vrabel
+
+2005-06-14 20:46 davidm
+
+ * cryptodev.c:
+
+ Fix up AES minimum key size
+
+ Make some more variables static
+
+2005-06-14 20:36 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ Use kernel caches as they are more efficient and faster to obtain.
+
+ Fix some spelling
+
+ Tune PKE to only use the space required. Turn off go fast options
+ to reduce any speed-related cracking.
+
+ Only zero data that needs to be zeroed (save some cycles)
+
+2005-06-02 21:42 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ Added optimisations ideas from Intel the improve the PKE
+ performance for 512 and 1024 bits operations.
+
+2005-06-01 02:13 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ Looks like I found the ixp bug. Using OSAL buffer routines on
+ non-OSAL buffers is a very very bad thing to do. Must double check
+ all the API's I am using (ie., PKE) just to be sure.
+
+2005-05-31 21:38 davidm
+
+ * Config.in, Kconfig:
+
+ Updated/Added the menu wrapper for the config options
+
+2005-05-31 21:18 gerg
+
+ * Config.in:
+
+ Reworked the config.in so that each sub-module has its own
+ Config.in. That way it is easier to make release trees with some
+ modules left in.
+
+2005-05-30 19:46 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ Not all the Pke code was appropriately ifdef'd
+
+2005-05-28 01:49 davidm
+
+ * cryptosoft.c:
+
+ We were not injecting data in the right places nor calling the
+ cipher code the best was under all situations. We are now good
+ enought to do ESP/AH processing with 3DES and SHA1-HMAC.
+
+2005-05-28 01:42 davidm
+
+ * hifn/hifn7751.c:
+
+ Non atomic kmallocs at IRQ time are bad and cause lockups
+
+2005-05-21 08:31 davidm
+
+ * README, README.sglinux:
+
+ Some small updates to email and patches that no longer exist
+
+2005-05-21 08:25 davidm
+
+ * cryptosoft.c:
+
+ better error message on failure, a lot of the error check we do
+ sems to break apps like cryptotest, not sure who is right yet.
+
+2005-05-21 00:55 davidm
+
+ * criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
+ random.c, rndtest.c, uio.h, hifn/hifn7751.c, ixp4xx/ixp4xx.c,
+ safe/safe.c, safe/safevar.h:
+
+ Convert to CyberGuard email addresses for OCF files.
+
+2005-05-21 00:28 davidm
+
+ * crypto.c, cryptodev.c, cryptosoft.c, hifn/hifn7751.c,
+ ixp4xx/ixp4xx.c, safe/safe.c:
+
+ final round of naming changes, hifn driver also confirmed working
+ in SG710
+
+2005-05-20 23:50 davidm
+
+ * cryptosoft.c, random.c, uio.h, ixp4xx/ixp4xx.c:
+
+ more copyright/author updates etc for Intel
+
+2005-05-20 23:48 davidm
+
+ * criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
+ random.c, rndtest.c, uio.h, ixp4xx/ixp4xx.c, safe/safe.c,
+ safe/safevar.h:
+
+ updated copyrights to reflect Intels interest/investment in the
+ project
+
+2005-05-20 20:31 davidm
+
+ * hifn/: hifn7751.c, hifn7751var.h:
+
+ Most of a working SKB implementation now
+
+2005-05-20 20:30 davidm
+
+ * safe/: md5.c, md5.h, safe.c, sha1.c, sha1.h:
+
+ Full AH/ESP processing now working, just added BSD sha/md5
+ routines as needed for now.
+
+2005-05-20 20:30 davidm
+
+ * random.c:
+
+ use the new BSD rndtest code rather than the old GPL fips code
+
+2005-05-20 20:28 davidm
+
+ * Makefile, fips.c, fips.h, rndtest.c, rndtest.h:
+
+ Get rid of the GPL version of the fips test and use a BSD licensed
+ version so no one can get upset and cry derivative :-)
+
+2005-05-20 08:19 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ High throughput improvements. Can now handle multiple simultaneous
+ requests.
+
+2005-05-20 00:55 davidm
+
+ * ixp4xx/ixp4xx.c:
+
+ works with openswan/OCF for ipsec receive.
+
+ fixes ESP/AUTH processing (esp. HMAC)
+
+ This driver needs a rework for kernel IPSEC as it's current packet
+ at a time processing is not up to the task.
+
+2005-05-20 00:53 davidm
+
+ * cryptosoft.c:
+
+ working ESP/AUTH code now impleneted. Can do RX processing for
+ openswan KLIPS.
+
+ Fixes numerous problems in skb processing
+
+ Fixes broken HMAC code and IV processing
+
+2005-05-14 01:44 davidm
+
+ * cryptodev.c, ixp4xx/ixp4xx.c:
+
+ Cleanup IXP key processing to guarantee only a single outstanding
+ request rather than relying on the intel driver to get it right.
+ Stops us losing requests.
+
+ Tighten up the cryptodev response to "no answer" so that we don't
+ take all the CPU. Only happens if there is a driver bug.
+
+2005-05-14 00:07 davidm
+
+ * Config.in, Kconfig, Makefile, crypto.c, fips.c, fips.h, random.c,
+ ixp4xx/ixp4xx.c, tools/bench-ocf:
+
+ PKE and RNG support running on the ixp driver, added PKE bench
+ marking to script. Still some multi-thread problems in the PKE
+ code.
+
+ Added FIP RNG checking option to config and code.
+
+2005-05-10 19:18 davidm
+
+ * Makefile, ixp4xx/ixp4xx.c:
+
+ Get the OCF stuff building for the 465 and CSR-2.0
+
+2005-04-27 19:18 davidm
+
+ * cryptodev.h, random.c, hifn/hifn7751.c, safe/safe.c:
+ cleanup the random number interface some more
+
+2005-04-27 00:57 davidm
+
+ * cryptodev.h, cryptosoft.c, random.c, hifn/hifn7751.c,
+ ixp4xx/ixp4xx.c, patches/linux-2.4.29-add_true_randomness.patch,
+ patches/linux-2.6.11-add_true_randomness.patch, safe/safe.c,
+ safe/safevar.h:
+
+ Switch to a more "user" like random number handling. Drivers no
+ longer poll for RNG data, we pull it as needed to fill
+ /dev/random's entropy.
+
+ Implement sk_buff handling within the OCF framework.
+
+ fixup IV handling in cryptosoft.
+
+2005-04-27 00:41 davidm
+
+ * crypto.c:
+
+ Fix a race condition with the starting of kernel threads. The
+ threads were running before the pid assignment in the parent.
+
+2005-03-24 23:57 davidm
+
+ * Makefile:
+ include crypto-tools.patch in the release file
+
+
+
+2005-03-24 20:14 davidm
+
+ * safe/safe.c:
+ Fixup compile time warnings due to some left over BSDisms
+
+
+2005-03-24 00:53 davidm
+
+ * Makefile, README, README.sglinux, patches/linux-2.4.29-ocf.patch,
+ patches/linux-2.6.11-ocf.patch, patches/ocf-linux-2.4.29.patch,
+ patches/ocf-linux-2.6.11.patch:
+ added cleaner patch names and a tarball target to aid releases
+
+
+2005-03-24 00:28 davidm
+
+ * patches/crypto-tools.patch,
+ patches/linux-2.4.29-add_true_randomness.patch,
+ patches/linux-2.6.11-add_true_randomness.patch,
+ patches/ocf-linux-2.4.29.patch, patches/ocf-linux-2.6.11.patch,
+ patches/ssh.patch, patches/ssl.patch, tools/bench-ocf:
+ move all the release file patches into CVS for simplicity
+
+
+2005-03-23 20:37 davidm
+
+ * safe/safe.c:
+ remove excessive debug from RNG routines so that you can turn on
+ debug and live through it
+
+
+
+2005-03-23 02:23 davidm
+
+ * safe/safe.c:
+ fix memory corruption for mod_exp and the safenet, we were copying
+ back more than the space available.
+
+
+
+2005-03-22 21:45 davidm
+
+ * crypto.c, cryptodev.c, cryptodev.h, safe/safe.c:
+ fixup a major sync issues with key processing (callback called
+ before sleeping). Improve its performance while we are there with
+ a CBIMM (callback immediate) option.
+
+
+
+2005-03-19 00:33 davidm
+
+ * random.c:
+ A new randomness function for both 2.4 and 2.6 that replaces out
+ previous old solution for the hifn driver with more generic code
+ that works on both kernels.
+
+ add_true_randomness(u_int32_t *buf, int nwords);
+
+
+
+2005-03-18 21:01 davidm
+
+ * Makefile, cryptodev.h, random.c, hifn/hifn7751.c, safe/safe.c:
+ RNG support in both the safenet and the hifn plus the required
+ kernel support.
+
+ "hd /dev/random" runs much much faster now :-)
+
+
+
+2005-03-17 23:29 toby
+
+ * cryptodev.c: Make sure the CIOCASYMFEAT ioctl on
+ /dev/crypto copies out the capable features.
+
+2005-03-17 01:19 davidm
+
+ * safe/: safe.c, safereg.h, safevar.h:
+ hardware PK acceleration on the safenet (CRK_MOD_EXP only)
+
+
+2005-03-16 04:28 davidm
+
+ * criov.c, crypto.c, cryptodev.c, safe/safe.c:
+ fixup the FBSD id stuff to compile :-)
+
+2005-03-16 04:02 davidm
+
+ * README, README.sglinux, TODO:
+ Updated with versions, removed tabs, new kernel versions, web
+ site etc
+
+2005-03-16 03:45 davidm
+
+ * criov.c, crypto.c, cryptodev.c, cryptodev.h:
+ more license formatting and version id's to help keep in touch with
+ FreeBSD
+
+2005-03-16 03:16 davidm
+
+ * safe/safe.c:
+ up to date with FreeBSD versioning, no changes to merge
+
+2005-03-16 03:15 davidm
+
+ * safe/safe.c:
+ include FreeBSD version info so I can track changes better
+
+
+2005-03-16 03:11 davidm
+
+ * hifn/: hifn7751.c, hifn7751reg.h, hifn7751var.h:
+ incorporate latest updates from FreeBSD:
+
+ | Update support for 795x parts: | o rework pll setup code to
+ follow h/w specification | o add hint.hifn.X.pllconfig to specify
+ reference clock setup | requirements; default is pci66 which
+ means the clock is | derived from the PCI bus clock and the card
+ resides in a | 66MHz slot | | Tested on 7955 and 7956 cards;
+ support for 7954 cards not enabled | since we have no cards to test
+ against.
+
+
+
+2005-03-16 02:50 davidm
+
+ * Config.in, Kconfig, README, crypto.c, cryptodev.c, cryptodev.h,
+ hifn/hifn7751.c, hifn/hifn7751var.h, safe/safe.c, safe/safevar.h:
+ cleanups to build and run on 2.6.11 and 2.4.29 for a public release
+
+ included configs locally to reduce patch to kernel and required
+ user effort.
+
+ pci_dma_sync_single fix from Michele Baldessari
+ , with modifications by me to work on all
+ kernels.
+
+
+
+2005-03-11 23:30 davidm
+
+ * Makefile:
+ fix up the compiling again, I had outstanding commits for this one
+ :-)
+
+2005-03-11 21:56 danield
+
+ * Makefile: Get ocf modules building again.
+
+2004-12-25 07:12 davidm
+
+ * TODO:
+ safenet is all good now AKAIK
+
+2004-12-25 07:02 davidm
+
+ * Makefile, crypto.c, cryptodev.c, cryptosoft.c, uio.h:
+ 2.6 port of the OCF framework, tested on Xscale and compiled for
+ x86
+
+
+
+2004-12-10 02:41 davidm
+
+ * hifn/hifn7751.c:
+ Fix compilation as l_flags was not defined for LOCK in pci_remove
+
+
+2004-12-06 19:15 davidm
+
+ * hifn/hifn7751.c, safe/safe.c:
+ * Put locking into hifn_remove to ensure interrupts are not running
+ while we remove the driver
+
+ Use del_timer_sync (need to ensure timer is not running on
+ another CPU
+ * when we delete it).
+
+ Improvements suggested by Evgeniy Polyakov <johnpol@2ka.mipt.ru>
+
+
+2004-12-02 09:16 davidm
+
+ * README, README.sglinux:
+ * Fix up all tabs to be spaces * explain how to update the ocf
+ support in the patch to the current version.
+
+
+
+2004-12-02 09:11 davidm
+
+ * README:
+ * fix some spelling/grammar * add more info on the ssl.patch file
+ and what it contains
+
+2004-12-02 09:08 davidm
+
+ * README.sglinux:
+ give some more instructions on the shar archive and extracting the
+ release.
+
+2004-12-02 09:03 davidm
+
+ * README.sglinux:
+ how to include crypto-tools into 3.1.6
+
+
+
+2004-12-02 08:48 davidm
+
+ * README.sglinux:
+ updated for a new crypto patch for openssl-0.9.7e
+
+2004-12-02 08:04 davidm
+
+ * README, README.sglinux:
+ Clean up the README's to use the new SG Linux alpha and a specific
+ 2.4.28 patch.
+
+
+
+2004-12-01 23:11 davidm
+
+ * Makefile, criov.c, crypto.c, cryptodev.c, cryptosoft.c,
+ hifn/Makefile, hifn/hifn7751.c, ixp4xx/Makefile, ixp4xx/ixp4xx.c,
+ safe/Makefile, safe/safe.c:
+ Re-worked the Makefiles so that including the code into a standard
+ non-SG kernel is really easy.
+
+ Fixed a non-initialised bug that was introduce into cryptosoft.c
+ with the additional error checking.
+
+
+
+2004-12-01 01:54 davidm
+
+ * TODO:
+ updates based on things that have been fixed.
+
+2004-12-01 01:53 davidm
+
+ * safe/: safe.c, safevar.h:
+ Cleanup some old hacks based on the much cleaner port of the hifn
+ driver.
+
+2004-12-01 01:53 davidm
+
+ * cryptosoft.c:
+ fix some crashes due to bad buffer sizes etc.
+
+2004-11-27 09:16 davidm
+
+ * crypto.c, cryptodev.c, ixp4xx/ixp4xx.c:
+ Fixed some nasty problems that were stopping reliable behaviour:
+
+ 1) we were not initialising some of our lists/wait queues, which
+ meant they appears to have things in them when in fact they did
+ not. This actually didn't seems to cause any problems but is
+ extremely bogus.
+
+ 2) While a process was waiting for the crypto engine, if
+ itreceived a signal we would lose sync with the engine and end
+ up allowing out-of-band actions that were invalid (ie.,
+ unregistering a context that was still active in a crypto
+ operation).
+
+ Of source the CryptACC should probably deal with this as well
+ ;-)
+
+
+
+2004-11-26 01:33 davidm
+
+ * TODO:
+ We should also hook in the random number generators to linux
+
+
+2004-11-26 01:33 davidm
+
+ * hifn/hifn7751.c:
+ Changed all the accesses to DMS descriptors to not set the valid
+ bit until after everything else was set. This got the driver
+ running smoothly, along with a fixup to the pci_map_uio which
+ wasn't settings lengths correctly.
+
+
+
+2004-11-25 21:15 davidm
+
+ * ixp4xx/ixp4xx.c:
+ document why using a new context for each packet is actually a
+ better idea than allocating one (actually two) per session.
+
+
+
+2004-11-25 08:48 davidm
+
+ * README, README.sglinux:
+ updates from email with Intel to fix a few little things
+
+
+2004-11-25 00:02 davidm
+
+ * README, README.sglinux, safe/safe.c:
+ Some cleanups of doc and so on for Intel/General use
+
+2004-11-23 07:58 davidm
+
+ * TODO:
+ safenet is working on big endian machines now
+
+
+
+2004-11-23 07:56 davidm
+
+ * ixp4xx/: Makefile, ixp4xx.c:
+ Reference the Intel library, cleanup the IV sizes and turn on AES.
+ Fix Makefile for new config options.
+
+
+
+2004-11-23 07:52 davidm
+
+ * Makefile:
+ Complete the changes of ixp to ixp4xx (IXP4xx) as appropriate
+
+
+2004-11-23 00:33 davidm
+
+ * Makefile, README, ixp4xx/Makefile:
+ Changes all references to ixp to be ixp4xx at Intels request
+
+
+2004-11-20 01:07 davidm
+
+ * safe/: safe.c, safereg.h:
+ fully working safenet on BE machines
+
+2004-11-19 01:03 davidm
+
+ * Makefile, hifn/Makefile, hifn/hifn7751.c, hifn/hifn7751reg.h,
+ hifn/hifn7751var.h:
+ hifn driver code complete and compiling, needs a test now ;-)
+
+
+2004-11-18 21:45 davidm
+
+ * hifn/: Makefile, hifn7751.c, hifn7751var.h:
+ Makefile for building the hifn driver
+
+2004-11-18 21:44 davidm
+
+ * hifn/: hifn7751.c, hifn7751reg.h, hifn7751var.h:
+ Checkin the orginal freebsd source for the hifn driver as a
+ reference in the future.
+
+
+
+2004-11-18 10:05 davidm
+
+ * Makefile, README, TODO, criov.c, crypto.c, cryptodev.c,
+ cryptodev.h, cryptosoft.c, uio.h, ixp4xx/Makefile, ixp4xx/ixp4xx.c,
+ safe/Makefile, safe/safe.c, safe/safevar.h:
+ Clean up license and copyright info to be more acceptable (and
+ present) Clean up debug and trace Fixup memory freeing etc on
+ safenet Fix compiler warnings (some were bugs)
+
+
+
+2004-11-17 02:23 davidm
+
+ * safe/safe.c:
+ working on Xscale (big endian) now but packet data is getting
+ stuffed up due to endian problems (at least now we are talking to
+ the chip correctly for BE). Good enough to test packet throughput,
+ no good for testing scp.
+
+
+
+2004-11-17 02:21 davidm
+
+ * criov.c:
+ Make sure public symbols are exported by including the correct
+ header files
+
+2004-11-17 02:15 davidm
+
+ * crypto.c:
+ even better cleanup of kernel threads on exit
+
+2004-11-17 02:15 davidm
+
+ * cryptosoft.c:
+ return some trace to debug so it doesn't appear
+
+2004-11-17 02:14 davidm
+
+ * Makefile:
+ Make sure all drivers get built, not just IXP
+
+2004-11-16 21:31 davidm
+
+ * crypto.c:
+ Fix problem with reboots and driver not unloading cleanly, we were
+ not handling signals correctly in the kernel threads,
+
+2004-11-10 10:46 davidm
+
+ * ixp4xx/ixp4xx.c:
+ fix serious context leak, itturns out the context is still
+ considered busy while it is calling the perform callback, so we
+ cleanup on closing the session and on allocating the next context
+ to work around this.
+
+
+
+2004-11-10 05:26 davidm
+
+ * crypto.c, cryptodev.c, ixp4xx/ixp4xx.c, safe/safe.c:
+ cleaned out some debug, found MAX tunnels bug, traced it various
+ other cleanups.
+
+
+
+2004-11-10 04:02 davidm
+
+ * cryptodev.c, cryptosoft.c, ixp4xx/ixp4xx.c, safe/Makefile,
+ safe/safe.c:
+ Fix up kmalloc usage to always zero resulting buffer everywhere
+ (stops crashes in ixp)
+
+ Add some function debug to ixp so you can see it working
+
+ Fix safe driver to build and install in a real tree.
+
+
+
+2004-11-10 02:27 davidm
+
+ * Makefile, criov.c, crypto.c, cryptosoft.c, ixp4xx/Makefile,
+ ixp4xx/ixp4xx.c:
+ Compiling OCF modules for the IXP crypto, needs testing now
+
+
+2004-11-09 19:16 davidm
+
+ * criov.c, crypto.c, cryptodev.c, cryptodev.h, cryptosoft.c,
+ cryptosoft.h, uio.h, safe/safe.c, safe/safevar.h:
+ The linux port of OCF with working safenet and software modules.
+ Still some bugs with mutiple crypto threads using the safenet
+ driver.
+
+
+
+2004-11-09 18:49 davidm
+
+ * Makefile, criov.c, crypto.c, cryptodev.c, cryptodev.h,
+ cryptosoft.c, cryptosoft.h, uio.h, safe/Makefile, safe/safe.c,
+ safe/safereg.h, safe/safevar.h:
+ Check in the orginal free-bsd sources for the OCF support. This
+ allows us to diff against it later to see if we botched anything
+ major league.
+
+
+