netdev - pull request (net-next): ipsec-next 2022-01-06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20220106091350.3038869-1-steffen.klassert@secunet.com>
Date:   Thu, 6 Jan 2022 10:13:43 +0100
From:   Steffen Klassert <steffen.klassert@...unet.com>
To:     David Miller <davem@...emloft.net>,
        Jakub Kicinski <kuba@...nel.org>
CC:     Herbert Xu <herbert@...dor.apana.org.au>,
        Steffen Klassert <steffen.klassert@...unet.com>,
        <netdev@...r.kernel.org>
Subject: pull request (net-next): ipsec-next 2022-01-06

1) Fix some clang_analyzer warnings about never read variables.
   From luo penghao.

2) Check for pols[0] only once in xfrm_expand_policies().
   From Jean Sacren.

3) The SA curlft.use_time was updated only on SA cration time.
   Update whenever the SA is used. From Antony Antony

4) Add support for SM3 secure hash.
   From Xu Jia.

5) Add support for SM4 symmetric cipher algorithm.
   From Xu Jia.

6) Add a rate limit for SA mapping change messages.
   From Antony Antony.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit bb8cecf8ba127abca8ccd102207a59c55fdae515:

  Merge branch 'lan78xx-napi' (2021-11-18 12:11:51 +0000)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git master

for you to fetch changes up to 4e484b3e969b52effd95c17f7a86f39208b2ccf4:

  xfrm: rate limit SA mapping change message to user space (2021-12-23 09:32:51 +0100)

----------------------------------------------------------------
Antony Antony (2):
      xfrm: update SA curlft.use_time
      xfrm: rate limit SA mapping change message to user space

Jean Sacren (1):
      net: xfrm: drop check of pols[0] for the second time

Xu Jia (2):
      xfrm: Add support for SM3 secure hash
      xfrm: Add support for SM4 symmetric cipher algorithm

luo penghao (2):
      ipv6/esp6: Remove structure variables and alignment statements
      xfrm: Remove duplicate assignment

 include/net/xfrm.h           |  5 +++++
 include/uapi/linux/pfkeyv2.h |  2 ++
 include/uapi/linux/xfrm.h    |  1 +
 net/ipv6/esp6.c              |  3 +--
 net/xfrm/xfrm_algo.c         | 41 +++++++++++++++++++++++++++++++++++++++++
 net/xfrm/xfrm_compat.c       |  6 ++++--
 net/xfrm/xfrm_input.c        |  1 +
 net/xfrm/xfrm_output.c       |  1 +
 net/xfrm/xfrm_policy.c       |  3 +--
 net/xfrm/xfrm_state.c        | 23 ++++++++++++++++++++++-
 net/xfrm/xfrm_user.c         | 18 +++++++++++++++++-
 11 files changed, 96 insertions(+), 8 deletions(-)