en Copyright 2025 Java http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#5daf8ed625af70ebb7e4740ab98a6054e9e52329 ossl: Add GCM support on powerpc64/powerpc64le (POWER8+)Separate ossl's existing AES-NI GCM implementation into a commonossl_aes_gcm.c and add conditionals to switch between OpenSSL's AES-NIand POWER8 GCM routines depending on the architecture. Since theexisting AVX-512 implementation is less agnostic, move it into aseparate ossl_aes_gcm_avx512.c.Reviewed by: markjMFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D44274 List of files: /src/sys/modules/ossl/Makefile Wed, 10 Sep 2025 16:54:24 +0000 Timothy Pearson <tpearson@raptorengineering.com> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#9630e68f94a45b64087b18cc21be07ba3d3c3e8e ossl: Add chacha-armv8-sve.S on aarch64Fixes: 4757b351ea9d ("openssl: Import version 3.5.1") List of files: /src/sys/modules/ossl/Makefile Fri, 15 Aug 2025 17:04:05 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/sys/modules/ossl/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#3465f14dac7dc4efaf1f8b4e10c2a00b2db7c513 ossl: Add support for powerpc64/powerpc64leSummary:Add support for building ossl(4) on powerpc64* by implementing ossl_cpuid andother support functions for powerpc. The required assembly files for ppc werealready present in-tree.Test Plan: The changes were tested using the in-tree tools/tools/crypto/cryptocheck.c tool on both powerpc64 and powerpc64le on a POWER9 system.Reviewed by: #powerpc, jhibbits, jhbDifferential Revision: https://reviews.freebsd.org/D41837 List of files: /src/sys/modules/ossl/Makefile Fri, 21 Jun 2024 07:15:55 +0000 Shawn Anastasio <sanatasio@raptorengineering.com> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#e655cc70dfcda5cfedb5a1d9bef1e87d55519f64 ossl: Move arm_arch.h to a common subdirectoryOpenSSL itself keeps only a single copy of this header. Do the same insys/crypto/openssl to avoid the extra maintenance burden. This requiresadjusting the include paths for generated asm files.No functional change intended.Reported by: jrtc27Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D42866 List of files: /src/sys/modules/ossl/Makefile Mon, 04 Dec 2023 17:29:11 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#629a72376d51aad812d6f1279403bc81c38c35d2 ossl: Add AES-GCM support for NEON-enabled armv7This provides substantially higher throughput than the fallbackimplementation.Reviewed by: jhbMFC after: 3 monthsSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D41305 List of files: /src/sys/modules/ossl/Makefile Thu, 30 Nov 2023 17:46:54 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#44f8e1e8530e1d2e95e84bbbe3d22ac9cb2557fe ossl: Add support for armv7OpenSSL provides implementations of several AES modes which usebitslicing and can be accelerated on CPUs which support the NEONextension. This patch adds arm platform support to ossl(4) and providesan AES-CBC implementation, though bsaes_cbc_encrypt() only implementsdecryption. The real goal is to provide an accelerated AES-GCMimplementation; this will be added in a subsequent patch.Initially derived from https://reviews.freebsd.org/D37420.Reviewed by: jhbSponsored by: Klara, Inc.Sponsored by: StormshieldMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D41304 List of files: /src/sys/modules/ossl/Makefile Thu, 30 Nov 2023 17:46:08 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#031beb4e239bfce798af17f5fe8dba8bcaf13d99 sys: Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/sys/modules/ossl/Makefile Wed, 16 Aug 2023 17:54:58 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#9b1d87286c78266dc76d32a06ed19bf3e93c0a3b ossl: Add a fallback AES-GCM implementation using AES-NIThis lets one use ossl(4) for AES-GCM operations on contemporary amd64platforms. A kernel benchmark indicates that this gives roughlyequivalent throughput to aesni(4) for various buffer sizes.Bulk processing is done in aesni-gcm-x86_64.S, the rest is handled in aC wrapper ported from OpenSSL's gcm128.c.Sponsored by: StormshieldSponsored by: Klara, Inc.Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D39967 List of files: /src/sys/modules/ossl/Makefile Fri, 02 Jun 2023 16:01:41 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#9a3444d91c706dda65040138acbdb8c932213960 ossl: Add a VAES-based AES-GCM implementation for amd64aes-gcm-avx512.S is generated from OpenSSL 3.1 and implements AES-GCM.ossl_x86.c detects whether the CPU implements the required AVX512instructions; if not, the ossl(4) module does not provide an AES-GCMimplementation. The VAES implementation increases throughput for allbuffer sizes in both directions, up to 2x for sufficiently largebuffers.The "process" implementation is in two parts: a generic OCF layer inossl_aes.c that calls a set of MD functions to do the heavy lifting.The intent there is to make it possible to add other implementations forother platforms, e.g., to reduce the diff required for D37421.A follow-up commit will add a fallback path to legacy AES-NI, so thatossl(4) can be used in preference to aesni(4) on all amd64 platforms.In the long term we would like to replace aesni(4) and armv8crypto(4)with ossl(4).Note, currently this implementation will not be selected by defaultsince aesni(4) and ossl(4) return the same probe priority for cryptosessions, and the opencrypto framework selects the first registeredimplementation to break a tie. Since aesni(4) is compiled into thekernel, aesni(4) wins. A separate change may modify ossl(4) to havepriority.Sponsored by: StormshieldSponsored by: Klara, Inc.Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D39783 List of files: /src/sys/modules/ossl/Makefile Fri, 02 Jun 2023 15:58:29 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#197ff4c35bf00fb61603592476d5213a16027987 ossl: Add support for AES-CBC cipherAES-CBC OpenSSL assembly is used underneath.The glue layer(ossl_aes.c) is based on CHACHA20 implementation.Contrary to the SHA and CHACHA20, AES OpenSSL assembly logicdoes not have a fallback implementation in case CPU doesn'tsupport required instructions.Because of that CPU caps are checked during initialization and AESsupport is advertised only if available.The feature is available on all architectures that ossl supports:i386, amd64, arm64.The biggest advantage of this patch over existing solutions(aesni(4) and armv8crypto(4)) is that it supports SHA,allowing for ETA operations.Sponsored by: StormshieldObtained from: SemihalfReviewed by: jhb (previous version)Differential revision: https://reviews.freebsd.org/D32099 List of files: /src/sys/modules/ossl/Makefile Tue, 02 Nov 2021 11:53:22 +0000 Kornel Duleba <mindal@semihalf.com> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#200bc58953f0f5403d5ae57691f34500afe4c614 Revert "ossl: Add support for AES-CBC cipher"This reverts commit 849faf4e0ba9a8b8f24ff34da93a0fd46c14eda9. List of files: /src/sys/modules/ossl/Makefile Sat, 06 Nov 2021 16:46:01 +0000 Wojciech Macek <wma@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#849faf4e0ba9a8b8f24ff34da93a0fd46c14eda9 ossl: Add support for AES-CBC cipherAES-CBC OpenSSL assembly is used underneath.The glue layer(ossl_aes.c) is based on CHACHA20 implementation.Contrary to the SHA and CHACHA20, AES OpenSSL assembly logicdoes not have a fallback implementation in case CPU doesn'tsupport required instructions.Because of that CPU caps are checked during initialization and AESsupport is advertised only if available.The feature is available on all architectures that ossl supports:i386, amd64, arm64.The biggest advantage of this patch over existing solutions(aesni(4) and armv8crypto(4)) is that it supports SHA,allowing for ETA operations.Sponsored by: StormshieldObtained from: SemihalfReviewed by: jhbDifferential revision: https://reviews.freebsd.org/D32099 List of files: /src/sys/modules/ossl/Makefile Tue, 02 Nov 2021 11:53:22 +0000 Kornel Duleba <mindal@semihalf.com> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#92aecd1e6fac47ffc893f628c1fe289568bb19cb ossl: Add ChaCha20 cipher support.Sponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28756 List of files: /src/sys/modules/ossl/Makefile Wed, 03 Mar 2021 23:17:43 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#a079e38b08f2f07c50ba915dae66d099559abdcc ossl: Add Poly1305 digest support.Reviewed by: cemSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28754 List of files: /src/sys/modules/ossl/Makefile Wed, 03 Mar 2021 23:17:29 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#22bd0c9731d73167352019c0c49d454196d029dc ossl: port to arm64Enable in-kernel acceleration of SHA1 and SHA2 operations on arm64 by addingsupport for the ossl(4) crypto driver. This uses OpenSSL's assembly routinesunder the hood, which will detect and use SHA intrinsics if they aresupported by the CPU.Reviewed by: jhbSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D27390 List of files: /src/sys/modules/ossl/Makefile Fri, 04 Dec 2020 21:12:17 +0000 Mitchell Horne <mhorne@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#fd86ae6800383dabe050e22176783857895800e3 ossl: split out x86 bits to x86/ossl_cpuid.cMake room for adding arm64 support to this driver by moving thex86-specific feature parsing to a separate file.Reviewed by: jhbSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D27388 List of files: /src/sys/modules/ossl/Makefile Fri, 04 Dec 2020 20:54:20 +0000 Mitchell Horne <mhorne@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#ba610be90a7cb6d851e0e0e6d7612769352a3c0c Add a kernel crypto driver using assembly routines from OpenSSL.Currently, this supports SHA1 and SHA2-{224,256,384,512} both as plainhashes and in HMAC mode on both amd64 and i386. It uses the SHAintrinsics when present similar to aesni(4), but uses SSE/AVXinstructions when they are not.Note that some files from OpenSSL that normally wrap the assemblyroutines have been adapted to export methods usable by 'structauth_xform' as is used by existing software crypto routines.Reviewed by: gallatin, jkim, delphij, gnnSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D26821 List of files: /src/sys/modules/ossl/Makefile Tue, 20 Oct 2020 17:50:18 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#5daf8ed625af70ebb7e4740ab98a6054e9e52329 ossl: Add GCM support on powerpc64/powerpc64le (POWER8+)Separate ossl's existing AES-NI GCM implementation into a commonossl_aes_gcm.c and add conditionals to switch between OpenSSL's AES-NIand POWER8 GCM routines depending on the architecture. Since theexisting AVX-512 implementation is less agnostic, move it into aseparate ossl_aes_gcm_avx512.c.Reviewed by: markjMFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D44274 List of files: /src/sys/modules/ossl/Makefile Wed, 10 Sep 2025 16:54:24 +0000 Timothy Pearson <tpearson@raptorengineering.com> http://opengrok.net:8080/history/src/sys/modules/ossl/Makefile#9630e68f94a45b64087b18cc21be07ba3d3c3e8e ossl: Add chacha-armv8-sve.S on aarch64Fixes: 4757b351ea9d ("openssl: Import version 3.5.1") List of files: /src/sys/modules/ossl/Makefile Fri, 15 Aug 2025 17:04:05 +0000 John Baldwin <jhb@FreeBSD.org>