From owner-freebsd-net Mon Nov 19 21:26:19 2001 Delivered-To: freebsd-net@freebsd.org Received: from web11602.mail.yahoo.com (web11602.mail.yahoo.com [216.136.172.54]) by hub.freebsd.org (Postfix) with SMTP id 138B237B418 for ; Mon, 19 Nov 2001 21:26:16 -0800 (PST) Message-ID: <20011120052615.36411.qmail@web11602.mail.yahoo.com> Received: from [202.94.0.21] by web11602.mail.yahoo.com via HTTP; Mon, 19 Nov 2001 21:26:15 PST Date: Mon, 19 Nov 2001 21:26:15 -0800 (PST) From: tang hongbin Subject: How can I add new ESP encryption functions into FreeBSD kernel To: net@freebsd.org In-Reply-To: <20011119205058.C89738@xor.obsecurity.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Dear Sir/Madam; A problem is troubling me in ages. I want to add my encryption algorithm of ESP, an algorithm like DES, into FreeBSD kernel so as to make kernel recognize it. I added its definitions in /usr/src/sys/net/pfkeyv2.h, added specific functions implementation into /usr/src/sys/netinet6/esp.core.c and added a new subdirectory in sys/crypto. Afterwards I rebuild kernel, but system can't recognize my ESP encryption algorithm when I use PF socket or setkey command to add a new SA into SAD including my new encryption. In a word, please tell me what I should do step by step if I want to add a new ESP encryption algorithm that I have already implemented into kernel so that I can use setkey commmand or sock system call to add SAs into SAD and the kernel can use fucntions I provided to encrypt or decrypt incoming or outgoing IP packages. Any your assistance would be greatly appreciated. Sincerelly yours, Tang hongbin __________________________________________________ Do You Yahoo!? Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month. http://geocities.yahoo.com/ps/info1 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message