Mark Murray 10cb24248a This is the much-discussed major upgrade to the random(4) device, known to you all as /dev/random. ... This code has had an extensive rewrite and a good series of reviews, both by the author and other parties. This means a lot of code has been simplified. Pluggable structures for high-rate entropy generators are available, and it is most definitely not the case that /dev/random can be driven by only a hardware souce any more. This has been designed out of the device. Hardware sources are stirred into the CSPRNG (Yarrow, Fortuna) like any other entropy source. Pluggable modules may be written by third parties for additional sources. The harvesting structures and consequently the locking have been simplified. Entropy harvesting is done in a more general way (the documentation for this will follow). There is some GREAT entropy to be had in the UMA allocator, but it is disabled for now as messing with that is likely to annoy many people. The venerable (but effective) Yarrow algorithm, which is no longer supported by its authors now has an alternative, Fortuna. For now, Yarrow is retained as the default algorithm, but this may be changed using a kernel option. It is intended to make Fortuna the default algorithm for 11.0. Interested parties are encouraged to read ISBN 978-0-470-47424-2 "Cryptography Engineering" By Ferguson, Schneier and Kohno for Fortuna's gory details. Heck, read it anyway. Many thanks to Arthur Mesh who did early grunt work, and who got caught in the crossfire rather more than he deserved to. My thanks also to folks who helped me thresh this out on whiteboards and in the odd "Hallway track", or otherwise. My Nomex pants are on. Let the feedback commence! Reviewed by: trasz,des(partial),imp(partial?),rwatson(partial?) Approved by: so(des)		2014-10-30 21:21:53 +00:00
..
bpf.c	The SYSCTL data pointers can come from userspace and must not be	2014-10-28 12:00:39 +00:00
bpf.h	Style: s/SYS_EVENTHANDLER_H/_SYS_EVENTHANDLER_H_/g	2013-10-28 20:32:05 +00:00
bpf_buffer.c	Changes to resolve races in bpfread() and catchpacket() that, at worst,	2012-12-10 16:14:44 +00:00
bpf_buffer.h	Call bpf_jitter() before acquiring BPF global lock due to malloc() being used inside bpf_jitter.	2012-05-21 22:19:19 +00:00
bpf_filter.c	Include strings.h so that bpf_filter.c can be built in userland.	2014-03-19 13:10:25 +00:00
bpf_jitter.c	General style cleanup, no functional change.	2009-11-20 21:12:40 +00:00
bpf_jitter.h	- Allocate scratch memory on stack instead of pre-allocating it with	2009-11-20 18:49:20 +00:00
bpf_zerocopy.c	- Modify vm_page_unwire() and vm_page_enqueue() to directly accept	2014-06-16 18:15:27 +00:00
bpf_zerocopy.h	- Fix trivial typo	2012-01-14 17:07:52 +00:00
bpfdesc.h	Changes to resolve races in bpfread() and catchpacket() that, at worst,	2012-12-10 16:14:44 +00:00
bridgestp.c	The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare	2013-10-26 17:58:36 +00:00
bridgestp.h	Move the interface media check to a taskqueue, some interfaces (usb) sleep	2012-04-20 10:06:28 +00:00
ethernet.h	Add const qualifier to the dst parameter of the ifnet if_output method.	2013-04-26 12:50:32 +00:00
fddi.h	Switch cmd argument to u_long. This matches what if_ethersubr.c does and	2009-06-21 10:29:31 +00:00
firewire.h	Switch cmd argument to u_long. This matches what if_ethersubr.c does and	2009-06-21 10:29:31 +00:00
flowtable.c	Pacify gcc.	2014-03-05 02:35:15 +00:00
flowtable.h	Add my copyright to flowtable.	2014-02-17 12:07:17 +00:00
ieee8023ad_lacp.c	- Move L2 addr configuration for the primary port to a taskqueue. This fixes	2014-10-05 02:34:21 +00:00
ieee8023ad_lacp.h	Use printb() for boolean flags in ro_opts and actor_state for LACP.	2014-10-05 02:37:01 +00:00
ieee_oui.h	Bump bhyve allocation up to 20 bits to avoid	2014-05-20 02:59:13 +00:00
if.c	Move if_get_counter initialization from if_attach into if_alloc.	2014-10-23 14:29:52 +00:00
if.h	* Add SIOCGI2C driver ioctl used to retrieve i2c info.	2014-08-29 18:02:58 +00:00
if_arc.h	Add const qualifier to the dst parameter of the ifnet if_output method.	2013-04-26 12:50:32 +00:00
if_arcsubr.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_arp.h	Migrate structs arpstat, icmpstat, mrtstat, pimstat and udpstat to PCPU	2013-07-09 09:50:15 +00:00
if_atm.h	Add const qualifier to the dst parameter of the ifnet if_output method.	2013-04-26 12:50:32 +00:00
if_atmsubr.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_bridge.c	Virtualize if_bridge(4) cloner.	2014-10-05 19:43:37 +00:00
if_bridgevar.h
if_clone.c	Include necessary headers that now are available due to pollution	2013-10-28 07:29:16 +00:00
if_clone.h	Style: s/SYS_EVENTHANDLER_H/_SYS_EVENTHANDLER_H_/g	2013-10-28 20:32:05 +00:00
if_dead.c	Add const qualifier to the dst parameter of the ifnet if_output method.	2013-04-26 12:50:32 +00:00
if_debug.c	Remove ifq_drops from struct ifqueue. Now queue drops are accounted in	2014-09-19 09:01:19 +00:00
if_disc.c	Virtualize if_disc(4) cloner.	2014-10-05 19:46:52 +00:00
if_dl.h	Simplify filling sockaddr_dl structure for if_resolvemulti()	2014-01-18 23:24:51 +00:00
if_edsc.c	Virtualize if_edsc(4).	2014-10-05 21:27:26 +00:00
if_enc.c	Our packet filters use mbuf's rcvif pointer to determine incoming interface.	2014-10-07 13:31:04 +00:00
if_enc.h
if_epair.c	Virtualize if_epair(4). An if_xname check for both "a" and "b" interfaces	2014-10-10 06:45:13 +00:00
if_ethersubr.c	This is the much-discussed major upgrade to the random(4) device, known to you all as /dev/random.	2014-10-30 21:21:53 +00:00
if_faith.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_fddisubr.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_fwsubr.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_gif.c	Remove redundant check and m_pullup() call.	2014-10-24 13:34:22 +00:00
if_gif.h	Overhaul if_gif(4):	2014-10-14 13:31:47 +00:00
if_gre.c	- Virtualize interface cloner for gre(4). This fixes a panic when destroying	2014-09-21 03:56:06 +00:00
if_gre.h	- Virtualize interface cloner for gre(4). This fixes a panic when destroying	2014-09-21 03:56:06 +00:00
if_iso88025subr.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_lagg.c	- Fix lladdr configuration which could prevent LACP mode from working.	2014-10-17 09:08:44 +00:00
if_lagg.h	- Move L2 addr configuration for the primary port to a taskqueue. This fixes	2014-10-05 02:34:21 +00:00
if_llatbl.c	Back out r249318, r249320 and r249327 due to a heisenbug most	2013-05-06 16:42:18 +00:00
if_llatbl.h	Remove include opt_ofed.h since OFED is unifdef'd.	2013-08-27 16:45:00 +00:00
if_llc.h
if_loop.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_media.c	Fix typos - remove duplicate "the".	2011-02-21 09:01:34 +00:00
if_media.h	Introduce a procedural interface to the ifnet structure. The new	2014-06-02 17:54:39 +00:00
if_mib.c	Remove ifq_drops from struct ifqueue. Now queue drops are accounted in	2014-09-19 09:01:19 +00:00
if_mib.h
if_pflog.h	o Create directory sys/netpfil, where all packet filters should	2012-09-14 11:51:49 +00:00
if_pfsync.h	Remove more constants related to static sysctl nodes. The MAXID constants	2014-02-25 18:44:33 +00:00
if_sppp.h
if_spppfr.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_spppsubr.c	Replace some calls to fuword() by fueword() with proper error checking.	2014-10-28 15:28:20 +00:00
if_stf.c	* Remove route caching in if_stf.	2014-10-17 15:07:04 +00:00
if_stf.h	Merge 'struct ip6protosw' and 'struct protosw' into one. Now we have	2014-08-08 01:57:15 +00:00
if_tap.c	Mechanically convert to if_inc_counter().	2014-09-19 10:39:58 +00:00
if_tap.h
if_tapvar.h	Revert part of an earlier patch attempt that snuck in with r240938.	2012-09-25 23:41:45 +00:00
if_tun.c	This is the much-discussed major upgrade to the random(4) device, known to you all as /dev/random.	2014-10-30 21:21:53 +00:00
if_tun.h
if_types.h	Remove IPX support.	2014-03-14 02:58:48 +00:00
if_var.h	Move the unconditional #include of net/ifq.h to the very end of file.	2014-09-28 17:09:40 +00:00
if_vlan.c	Virtualize net.link.vlan.soft_pad.	2014-10-02 05:56:17 +00:00
if_vlan_var.h	Style: s/SYS_EVENTHANDLER_H/_SYS_EVENTHANDLER_H_/g	2013-10-28 20:32:05 +00:00
if_vxlan.c	Use the size of the Ethernet address, not the entire header, when	2014-10-21 05:45:57 +00:00
if_vxlan.h	Add vxlan interface	2014-10-20 14:42:42 +00:00
ifq.h	Remove duplicate declaraton of the if_inc_counter() function after r272244.	2014-09-28 15:38:21 +00:00
iso88025.h	Garbage collect long time obsoleted (or never used) stuff from routing API.	2014-03-15 06:49:32 +00:00
netisr.c	Pull in r267961 and r267973 again. Fix for issues reported will follow.	2014-06-28 03:56:17 +00:00
netisr.h	Update the IPv4 input path to handle reassembled frames and incoming frames	2014-09-09 04:18:20 +00:00
netisr_internal.h	Rework netisr policy mechanism so that per-protocol dispatch policies can	2011-05-24 12:34:19 +00:00
netmap.h	Update to the current version of netmap.	2014-08-16 15:00:01 +00:00
netmap_user.h	Update to the current version of netmap.	2014-08-16 15:00:01 +00:00
paravirt.h	Update to the current version of netmap.	2014-08-16 15:00:01 +00:00
pfil.c	The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare	2013-10-26 17:58:36 +00:00
pfil.h	Whitespace, style cleanups, and improved comments.	2013-08-24 12:03:24 +00:00
pfkeyv2.h	Added support for NAT-Traversal (RFC 3948) in IPsec stack.	2009-06-12 15:44:35 +00:00
pfvar.h	- Count global pf(4) statistics in counter(9).	2014-08-14 18:57:46 +00:00
ppp_defs.h	Allow certain headers to be included more easily.	2013-05-21 21:20:10 +00:00
radix.c	since we cast a pointer, use the correct signedness	2014-10-22 18:55:36 +00:00
radix.h	Revert previous commit (262727) and bounce patch back to the	2014-03-04 23:55:04 +00:00
radix_mpath.c	- Remove rt_metrics_lite and simply put its members into rtentry.	2014-03-05 01:17:47 +00:00
radix_mpath.h
raw_cb.c	vnet.h needs to be included before raw_cb.h. Now it compiles due to	2013-10-25 19:49:03 +00:00
raw_cb.h	Pass the fibnum where we need filtering of the message on the	2011-09-28 13:48:36 +00:00
raw_usrreq.c	vnet.h needs to be included before raw_cb.h. Now it compiles due to	2013-10-25 19:49:03 +00:00
route.c	Make net.add_addr_allfibs vnet-local.	2014-09-21 03:48:20 +00:00
route.h	Fix build.	2014-09-21 07:16:51 +00:00
rtsock.c	Remove ifq_drops from struct ifqueue. Now queue drops are accounted in	2014-09-19 09:01:19 +00:00
sff8436.h	* Add new net/sff8436.h containing constants used to access	2014-08-21 17:54:42 +00:00
sff8472.h	* Add new net/sff8436.h containing constants used to access	2014-08-21 17:54:42 +00:00
slcompress.c
slcompress.h
vnet.c	Remove identical vnet sysctl handlers, and handle CTLFLAG_VNET	2014-02-07 13:47:33 +00:00
vnet.h	Fixup for r261590 (vnet sysctl handlers cleanup).	2014-02-09 08:13:17 +00:00
zlib.c	Juggle some internal symbols from our antique zlib (that originally came	2013-01-06 14:59:59 +00:00
zlib.h	Juggle some internal symbols from our antique zlib (that originally came	2013-01-06 14:59:59 +00:00
zutil.h	Merge projects/enhanced_coredumps (r204346) into HEAD:	2010-03-02 06:58:58 +00:00