/freebsd/sys/netipsec/ |
H A D | ipsec.c | 1201 check_window(const struct secreplay *replay, uint64_t seq) in check_window() argument 1205 SECREPLAY_ASSERT(replay); in check_window() 1209 & IPSEC_BITMAP_INDEX_MASK(replay->bitmap_size); in check_window() 1212 return ((replay->bitmap)[index] & (1 << bit_location)); in check_window() 1216 advance_window(const struct secreplay *replay, uint64_t seq) in advance_window() argument 1221 SECREPLAY_ASSERT(replay); in advance_window() 1223 index_cur = replay->last >> IPSEC_REDUNDANT_BIT_SHIFTS; in advance_window() 1227 if (diff > replay->bitmap_size) { in advance_window() 1229 diff = replay->bitmap_size; in advance_window() 1233 replay->bitmap[(i + index_cur + 1) in advance_window() [all …]
|
H A D | xform_esp.c | 124 if (sav->tdb_authalgxform != NULL && sav->replay) in esp_hdrsiz() 340 if (esph != NULL && sav->replay != NULL && sav->replay->wsize != 0) { in esp_input() 383 (sav->replay != NULL) && (sav->replay->wsize != 0)) { in esp_input() 411 sav->replay != NULL && sav->replay->wsize != 0) in esp_input() 584 if (sav->replay) { in esp_input_cb() 808 if (sav->replay) { in esp_output() 809 uint32_t replay; in esp_output() local 811 SECREPLAY_LOCK(sav->replay); in esp_output() 816 sav->replay->count++; in esp_output() 817 replay = htonl((uint32_t)sav->replay->count); in esp_output() [all …]
|
H A D | xform_ah.c | 197 if (((sav->flags&SADB_X_EXT_OLD) == 0) ^ (sav->replay != NULL)) { in ah_init0() 201 sav->replay == NULL ? "without" : "with")); in ah_init0() 569 if (sav->replay != NULL && sav->replay->wsize != 0 && in ah_input() 665 sav->replay != NULL && sav->replay->wsize != 0) { in ah_input() 781 if (sav->replay) { in ah_input_cb() 949 if (sav->replay) { in ah_output() 950 SECREPLAY_LOCK(sav->replay); in ah_output() 951 if ((sav->replay->count == ~0 || in ah_output() 953 ((uint32_t)sav->replay->count) == ~0)) && in ah_output() 955 SECREPLAY_UNLOCK(sav->replay); in ah_output() [all …]
|
H A D | key_debug.c | 287 printf("sadb_prop{ replay=%u\n", prop->sadb_prop_replay); in kdebug_sadb_prop() 418 printf("sadb_sa{ spi=%u replay=%u state=%u\n", in kdebug_sadb_sa() 493 struct sadb_x_sa_replay *replay; in kdebug_sadb_x_sa_replay() 499 replay = (struct sadb_x_sa_replay *)ext; 500 printf("sadb_x_sa_replay{ replay=%u }\n", in kdebug_sadb_x_natt() 501 replay->sadb_x_sa_replay_replay); in kdebug_sadb_x_natt() 887 if (sav->replay != NULL) { in kdebug_secasv() 892 kdebug_secreplay(sav->replay); 488 struct sadb_x_sa_replay *replay; kdebug_sadb_x_sa_replay() local
|
H A D | key.c | 3244 if (sav->replay != NULL) { in key_cleansav() 3245 mtx_destroy(&sav->replay->lock); in key_cleansav() 3246 if (sav->replay->bitmap != NULL) in key_cleansav() 3247 free(sav->replay->bitmap, M_IPSEC_MISC); in key_cleansav() 3248 free(sav->replay, M_IPSEC_MISC); in key_cleansav() 3249 sav->replay = NULL; in key_cleansav() 3454 uint32_t replay; in key_setsaval() local 3487 replay = 0; in key_setsaval() 3489 replay = sa0->sadb_sa_replay; in key_setsaval() 3495 replay = ((const struct sadb_x_sa_replay *) in key_setsaval() [all …]
|
H A D | keydb.h | 161 struct secreplay *replay; /* replay prevention */ 158 struct secreplay *replay; /* replay prevention */ global() member
|
/freebsd/sys/ofed/drivers/infiniband/core/ |
H A D | ib_uverbs_std_types_flow_action.c | 91 static int flow_action_esp_replay_none(struct ib_flow_action_attrs_esp_replays *replay, in flow_action_esp_replay_none() argument 102 static int flow_action_esp_replay_def_ok(struct ib_flow_action_attrs_esp_replays *replay, in flow_action_esp_replay_def_ok() argument 111 …ic int (* const flow_action_esp_replay_validate[])(struct ib_flow_action_attrs_esp_replays *replay, 221 struct ib_flow_action_attrs_esp_replays replay; member 279 esp_attr->replay.protocol = in parse_flow_action_esp() 283 ret = uverbs_copy_from_or_zero(&esp_attr->replay.replay, in parse_flow_action_esp() 289 ret = flow_action_esp_replay_validate[esp_attr->replay.protocol](&esp_attr->replay, in parse_flow_action_esp() 294 esp_attr->hdr.replay = &esp_attr->replay; in parse_flow_action_esp()
|
/freebsd/sbin/setkey/ |
H A D | scriptdump.pl | 36 $replay = $2; 39 print " -m $ipsecmode -r $replay" if $replay;
|
/freebsd/contrib/libxo/xolint/ |
H A D | xolint.pl | 138 local $ln, $rln, $line, $replay; 174 $replay = $curln . " " . $line; 229 $replay .= $curln . " " . $line; 681 print STDERR $replay . "\n" if $opt_print; 688 print STDERR $replay . "\n" if $opt_print; 695 print STDERR $replay . "\n" if $opt_print;
|
/freebsd/sys/dev/mlx5/mlx5_accel/ |
H A D | mlx5_ipsec.c | 227 if (savp->replay) { in mlx5e_ipsec_build_accel_xfrm_attrs() 228 switch (savp->replay->wsize) { in mlx5e_ipsec_build_accel_xfrm_attrs() 307 if (savp->replay && savp->replay->wsize != 0 && savp->replay->wsize != 4 && in mlx5e_xfrm_validate_state() 308 savp->replay->wsize != 8 && savp->replay->wsize != 16 && savp->replay->wsize != 32) { in mlx5e_xfrm_validate_state() 309 mlx5_core_err(mdev, "Unsupported replay window size %d\n", savp->replay->wsize); in mlx5e_xfrm_validate_state() 318 } else if (savp->replay != NULL && savp->replay->wsize != 0) { in mlx5e_xfrm_validate_state()
|
/freebsd/crypto/heimdal/lib/krb5/ |
H A D | krb5_err.et | 47 error_code ERR_REPEAT, "Request is a replay" 165 error_code KRB5_RC_MALLOC, "No more memory to allocate (in replay cache code)" 168 error_code KRB5_RC_REPLAY, "Message is a replay" 173 error_code KRB5_RC_IO_EOF, "End-of-file on replay cache I/O" 174 error_code KRB5_RC_IO_MALLOC, "No more memory to allocate (in replay cache I/O code)" 175 error_code KRB5_RC_IO_PERM, "Permission denied in replay cache code" 176 error_code KRB5_RC_IO_IO, "I/O error in replay cache i/o code" 178 error_code KRB5_RC_IO_SPACE, "Insufficient system space to store replay information" 237 error_code KRB5_RCACHE_BADVNO, "Unsupported replay cache format version number" 245 error_code KRB5_RC_REQUIRED, "Message replay detection requires rcache parameter"
|
/freebsd/crypto/openssl/doc/man3/ |
H A D | SSL_read_early_data.pod | 69 additional considerations around replay attacks (see L</REPLAY PROTECTION> 206 early data setting for a server is nonzero then replay protection is 231 is accepted or not, for example to mitigate replay risks (see L</REPLAY PROTECTION> 239 in which case this callback will not get called. Notably, the built-in replay 288 mitigation for this issue OpenSSL automatically enables replay protection if the 289 server is configured with a nonzero max early data value. With replay 296 The replay protection mechanism relies on the internal OpenSSL server session 297 cache (see L<SSL_CTX_set_session_cache_mode(3)>). When replay protection is 311 result in an application becoming vulnerable to replay attacks. Note that 317 the possibility of replay attacks. [all …]
|
H A D | SSL_CONF_cmd.pod | 252 Switches replay protection, on or off respectively. With replay protection on, 257 is only used by servers. Anti-replay measures are required for compliance with 258 the TLSv1.3 specification. Some applications may be able to mitigate the replay 260 required. Switching off anti-replay is equivalent to B<SSL_OP_NO_ANTI_REPLAY>. 518 servers. Anti-replay measures are required to comply with the TLSv1.3 519 specification. Some applications may be able to mitigate the replay risks in 521 Disabling anti-replay is equivalent to setting B<SSL_OP_NO_ANTI_REPLAY>.
|
H A D | SSL_CTX_set_options.pod | 209 OpenSSL will switch on replay protection. See L<SSL_read_early_data(3)> for a 210 description of the replay protection feature. Anti-replay measures are required 212 mitigate the replay risks in other ways and in such cases the built in OpenSSL
|
H A D | OCSP_request_add1_nonce.pod | 49 An OCSP nonce is typically added to an OCSP request to thwart replay attacks
|
/freebsd/crypto/heimdal/lib/kadm5/ |
H A D | iprop-commands.in | 74 name = "replay" 78 help = "start replay with this version" 85 help = "end replay with this version"
|
/freebsd/contrib/wpa/wpa_supplicant/doc/docbook/ |
H A D | wpa_background.sgml | 44 makes attacks easier, there is no replay protection, and non-keyed 52 per-packet RC4 keys. In addition, it implements replay protection,
|
/freebsd/sys/modules/krpc/ |
H A D | Makefile | 16 replay.c \
|
/freebsd/contrib/googletest/googlemock/ |
H A D | README.md | 24 - Does automatic verification of expectations (no record-and-replay needed).
|
/freebsd/crypto/heimdal/kdc/ |
H A D | Makefile.in | 52 noinst_PROGRAMS = kdc-replay$(EXEEXT) 180 kdc_replay_SOURCES = kdc-replay.c 181 kdc_replay_OBJECTS = kdc-replay.$(OBJEXT) 211 $(hprop_SOURCES) $(hpropd_SOURCES) $(kdc_SOURCES) kdc-replay.c \ 214 $(hprop_SOURCES) $(hpropd_SOURCES) $(kdc_SOURCES) kdc-replay.c \ 779 kdc-replay$(EXEEXT): $(kdc_replay_OBJECTS) $(kdc_replay_DEPENDENCIES) 780 @rm -f kdc-replay$(EXEEXT) 804 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/kdc-replay.Po@am__quote@
|
H A D | Makefile.am | 15 noinst_PROGRAMS = kdc-replay
|
/freebsd/sys/dev/evdev/ |
H A D | input.h | 257 struct ff_replay replay; member
|
/freebsd/crypto/heimdal/doc/ |
H A D | whatis.texi | 128 It would be possible to add a @dfn{replay cache} 129 @cindex replay cache
|
/freebsd/contrib/file/magic/Magdir/ |
H A D | audio | 304 >22 byte =0 replay 5.485 KHz 305 >22 byte =1 replay 8.084 KHz 306 >22 byte =2 replay 10.971 KHz 307 >22 byte =3 replay 16.168 KHz 308 >22 byte =4 replay 21.942 KHz 309 >22 byte =5 replay 32.336 KHz 310 >22 byte =6 replay 43.885 KHz 311 >22 byte =7 replay 47.261 KHz
|
/freebsd/contrib/nvi/vi/ |
H A D | v_txt.c | 473 goto replay; in v_txt() 542 goto replay; in v_txt() 595 replay: if (LF_ISSET(TXT_REPLAY)) { in v_txt() 855 goto replay; in v_txt() 1359 goto replay; in v_txt() 1407 goto replay; in v_txt()
|