From owner-freebsd-current@freebsd.org  Sat Jul 11 17:11:01 2015
Return-Path: <owner-freebsd-current@freebsd.org>
Delivered-To: freebsd-current@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 50917999AA6;
 Sat, 11 Jul 2015 17:11:01 +0000 (UTC)
 (envelope-from freebsd-listen@fabiankeil.de)
Received: from smtprelay02.ispgateway.de (smtprelay02.ispgateway.de
 [80.67.18.44])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 0F2D11B84;
 Sat, 11 Jul 2015 17:11:00 +0000 (UTC)
 (envelope-from freebsd-listen@fabiankeil.de)
Received: from [78.35.182.36] (helo=fabiankeil.de)
 by smtprelay02.ispgateway.de with esmtpsa (TLSv1.2:AES128-GCM-SHA256:128)
 (Exim 4.84) (envelope-from <freebsd-listen@fabiankeil.de>)
 id 1ZDyC9-0007jW-1n; Sat, 11 Jul 2015 19:04:09 +0200
Date: Sat, 11 Jul 2015 19:04:07 +0200
From: Fabian Keil <freebsd-listen@fabiankeil.de>
To: freebsd-current@freebsd.org
Cc: "Matthew D. Fuller" <fullermd@over-yonder.net>, "George V. Neville-Neil"
 <gnn@FreeBSD.org>, svn-src-head@freebsd.org
Subject: geli AES-XTS provider attachment broken after r285336 (was: svn
 commit: r285336 - in head/sys: netipsec opencrypto)
Message-ID: <4308d5d9.790ffd96@fabiankeil.de>
In-Reply-To: <20150711044843.GG96394@over-yonder.net>
References: <201507091816.t69IGawf097288@repo.freebsd.org>
 <20150711044843.GG96394@over-yonder.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 boundary="Sig_/K5idZyQVZ/05C_8FJYLRtlD"; protocol="application/pgp-signature"
X-Df-Sender: Nzc1MDY3
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Jul 2015 17:11:01 -0000

--Sig_/K5idZyQVZ/05C_8FJYLRtlD
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

"Matthew D. Fuller" <fullermd@over-yonder.net> wrote:

> On Thu, Jul 09, 2015 at 06:16:36PM +0000 I heard the voice of
> George V. Neville-Neil, and lo! it spake thus:
> > New Revision: 285336
> > URL: https://svnweb.freebsd.org/changeset/base/285336
> >=20
> > Log:
> >   Add support for AES modes to IPSec.  These modes work both in softwar=
e only
> >   mode and with hardware support on systems that have AESNI instruction=
s.
>=20
> With (apparently) this change, I can trigger a panic at will by
> running
>=20
> % geli onetime -e AES-XTS -d /dev/ada0s1

Thanks for the heads-up.

As it wasn't obvious to me: the commit broke attachment
of AES-XTS providers in general.

Reverting it lets my test system boot again.

Fabian

--Sig_/K5idZyQVZ/05C_8FJYLRtlD
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlWhTIEACgkQBYqIVf93VJ30wgCfeJfieZG4lWyq5rB0iOhTIPq3
gPgAn0WalnZhAi5hZmRBVAKmQUKqbmML
=u6CM
-----END PGP SIGNATURE-----

--Sig_/K5idZyQVZ/05C_8FJYLRtlD--