From owner-freebsd-hackers@FreeBSD.ORG Wed Mar 2 10:41:27 2011 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 80C22106566C for ; Wed, 2 Mar 2011 10:41:27 +0000 (UTC) (envelope-from riaank@gmail.com) Received: from mail-ww0-f50.google.com (mail-ww0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id 1A9FE8FC17 for ; Wed, 2 Mar 2011 10:41:26 +0000 (UTC) Received: by wwb31 with SMTP id 31so7705968wwb.31 for ; Wed, 02 Mar 2011 02:41:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:date:message-id:subject:from:to :content-type; bh=rE+Q8Hduz0pEd4eNOu/2OCRlE9FJ1DLGJIWgBEGbbG4=; b=d0grnUPVgr3pW5TEHBJimZOSs/sv0dTRZDHZUjgGh63YwUtK2lK4MZjL84ZLvxd+PQ 2GciAutyW7pL/Vj7r5wh6HhAkJEz6gRukEFAVvqQBxlIMA7kKHmAkm6nGOj+SB6IhPqv M9Xov8yohZs5FgVUyF0DMcN8MCNQHPHN3RZFA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=J6GgnjU2I/9zrfMFCN9hxGiieFQRa2PnE6wphhM2WtCp41O0XI5lxaW0tTeZ4wdNO8 WSedZePNWS5P9AziFrX3ljRtTSsMuog6GaowE6JXyeqCPAOBoX1L1vuQ0K+37n6uOHmh 5rXmmT46kaNS5fKBmmIKxxIHzHX3OVVmh3ELA= MIME-Version: 1.0 Received: by 10.227.147.14 with SMTP id j14mr7275630wbv.98.1299060890732; Wed, 02 Mar 2011 02:14:50 -0800 (PST) Received: by 10.227.149.195 with HTTP; Wed, 2 Mar 2011 02:14:50 -0800 (PST) Date: Wed, 2 Mar 2011 12:14:50 +0200 Message-ID: From: Riaan Kruger To: freebsd-hackers@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Subject: AES-GCM in FreeBSD X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2011 10:41:27 -0000 We wish to implement AES-GCM in the FreeBSD OCF whith the main aim of using it in IPsec [a]. I have a number of questions: 1. What mailing list is the most appropriate for questions and comments related to this subject? 2. What is the best way to share any work done? (pacthes to mailing list?) 3. Is it best to work of HEAD when implementing the solution? 4. We aim to port the work done for openbsd [b][c]. Does anybody know of any specific pitfalls, gotchas etc. when using this approach? (E.g.I assume the FreeBSD OCF has diverged from OpenBSDs over the years) [a] - RFC4106: The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP), http://tools.ietf.org/html/rfc4106 [b] - AES-GCM Part 1: AES-GCM implementation, http://marc.info/?t=128233110500001&r=1&w=2 [c] - AES-GCM Part 2: PFKEY/ESP, http://marc.info/?t=128258773600009&r=1&w=2