- Copy stable/10 (r259064) to releng/10.0 as part of the
10.0-RELEASE cycle.
- Update __FreeBSD_version [1]
- Set branch name to -RC1

[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so
start releng/10.0 at '100' so the branch is started with
a value ending in zero.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Remove dead variable assignments

Found by: clang static analyzer
Verified by: md5(1)

Teach gbde(8) to use a key file in addition to a passphrase. This
makes it practical to use GBDE for "something you have plus something
you know" security together with a USB flash drive.

Reviewed by: phk
MFC after: 7 days

gbde(8) is also rejndael user.

Reported by: phk

- Fixed description of the "destroy" command options.
- Document the "nuke" command.
- Mention which commands correspond to which functions.

- Sort options.
- Put 'break' into separate line.

Fix whitespace.

- Remove bogus O_CREAT flag. We really don't want to create a file here.

PR: bin/67793
Submitted by: Amir Shalem <amir@boom.org.il>

- Sync usage with manual page.

Approved by: phk
MFC after: 1 week

Fix a type bug which sometimes wrote unusable lock sectors on the disk.

Allow to setup GBDE on providers which contain '/' in their names,
e.g. mirror/<name>, stripe/<name>.

Approved by: phk

o Fix semantics of comparison function for qsort(3). According to qsort(3)
manpage:

The comparison function must return an integer less than, equal to, or
greater than zero if the first argument is considered to be respectively
less than, equal to, or greater than the second.

Therefore, simply returning "arg1 > arg2" is incorrect. Actually it works
but for the number of items to be sorted less than 7 due to special case
handling in qsort(3);

o add missing '\n' to one of usage() calls.

Approved by: phk

Don't create a template file if we're not going to let the user edit it.

Fixed some non-critical memory leaks and one temporary file leak
(theoretical).

Approved by: phk, scottl (mentor)

Mechanical whitespace cleanup. Also, note that previous commit was

Sponsored by: Teleplan AS

Remove newline characters from error strings.

Insert an overview of the plans here, in case I get run over by a bus.

I think it is more correct to use modfind() than kldfind() here.

Autoload kernel module if necessary.

Submitted by: mr

Interior decoration changes.

Simplify the GEOM OAM api: Drop the request type, and let everything
hinge on the "verb" parameter which the class gets to interpret as
it sees fit.

Move the entire request into the kernel and move changed parameters
back when done.

Avoid off_t -> integer overflow when sorting the locksector addresses.

Use new GEOM OAM. Kernels have supported this for a number of days, so
people should be OK.

Fix two unsafe uses of sprintf().

Correct some err() format string bugs.

Solve another bug in the mapping code: correctly skip lock sectors.
Make sure sector zero is protected if it contains metadata.

Lower WARNS for gbde to 3 on non-i386 archs. rijndael-fst is evil
but appearntly does the right thing and passes the test-vectors.

MFC Candidate.

Fix two blunders in the mapping functions which can lead to corrupt data,
for request sizes larger than the sectorsize or for multi-key setups.

See warning mailed to current@ for details of recovery.

Found by: Marcus Reid <marcus@blazingdot.com>

Untwist a twisty bit of logic which gcc for some reason cannot see
through on ia64.

A couple of stylistic improvements.

Synchronize usage() with reality.
Semi-automatic handling of /dev prefix for device names.

Sponsored by: DARPA & NAI Labs.
Approved by: re (blanket)

Run a revision on the GBDE encryption facility.

Replace ARC4 with SHA2-512.
Change lock-structure encoding to use random ordering rather for obscurity.
Encrypt lock-structure with AES/256 instead of AES/128.
Change kkey derivation to be MD5 hash based.
Watch for malloc(M_NOWAIT) failures and ditch our cache when they happen.
Remove clause 3 of the license with NAI Labs consent.

Many thanks to "Lucky Green" <shamrock@cypherpunks.to> and "David
Wagner" <daw@cs.berkeley.edu>, for code reading, inputs and
suggestions.

This code has still not been stared at for 10 years by a gang of
hard-core cryptographers. Discretion advised.

NB: These changes result in the on-disk format changing: dump/restore needed.

Sponsored by: DARPA & NAI Labs.

Initialize the new salt field in the lock sector.

Sponsored by: DARPA & NAI Labs

s/dettach/detach/g etc.

Pointed out by: chris

Complete the Geom Based Disk Encryption: Add the OAM utility.

Sponsored by: DARPA and NAI Labs