- Copy stable/10 (r259064) to releng/10.0 as part of the
10.0-RELEASE cycle.
- Update __FreeBSD_version [1]
- Set branch name to -RC1

[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so
start releng/10.0 at '100' so the branch is started with
a value ending in zero.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Make test00 compilable again.

Assert proper key size also in userland by defining KASSERT in !_KERNEL case.

Unbreak the world build (in sbin/gbde). This file is used by both
kernel and world, so KASSERT() needs to be wrapped within an #ifdef
_KERNEL / #endif pair.

Reported by: krion, tinderbox

Check key size for rijndael, as invalid key size can lead to kernel panic.
It checked other algorithms against this bug and it seems they aren't
affected.

Reported by: Mike Tancsa <mike@sentex.net>
PR: i386/84860
Reviewed by: phk, cperciva(x2)

gbde(8) is also rejndael user.

Reported by: phk

just use crypto/rijndael, and nuke opencrypto/rindael.[ch].
the two became almost identical since latest KAME merge.

Discussed with: sam

integrate rijndael-alg-fst.h into rijndael.h.

stop including rijndael-api-fst.h from rijndael.h.
this is required to integrate opencrypto into crypto.

Start the dreaded NOFOO -> NO_FOO conversion.

OK'ed by: core

For variables that are only checked with defined(), don't provide
any fake value.

avoid module name conflict with opencrypto/rijndael.c.

Reported by: tinderbox

cleanup rijndael API.
since there are naming conflicts with opencrypto, #define was
added to rename functions intend to avoid conflicts.

Obtained from: KAME

rijndael-alg-fst.[ch]:
- redo updating.

rijndael-api-fst.[ch]:
- switch to use new low level rijndael api.
- stop using u8, u16 and u32.
- space cleanup.

Tested by: gbde(8) and phk's test program

Add a testcase which validates that the same buffer can be passed to
rijndael_blockDecrypt() as both input and output.

This property is important because inside rijndael we can get away
with allocating just a 16 byte "work" buffer on the stack (which
is very cheap), whereas the calling code would need to allocate the
full sized buffer, and in all likelyhood would have to do so with
an expensive malloc(9).

- revert to old rijndael code. new rijndael code broke gbde.
- since aes-xcbc-mac and aes-ctr require functions in new
rijndael code, aes-xcbc-mac and aes-ctr are disabled for now.

Fix alignment problem on 64 bit arch.
I only tested if it doesn't break anything on i368. Since I
have no 64 bit machine, I cannot test it, actually.

Reported by: jmallett

simplify and update rijndael code.

Obtained from: KAME

one more opossite conditiion.

Reported by: "lg" <zevlg@yandex.ru>

condition of padLen check was opposite.

Reported by: "lg" <zevlg@yandex.ru>
Reviewed by: Lev Walkin <vlm@netli.com>

Use __FBSDID().

Don't panic when we can just return an error code.

Fixed AES encryption algorithm bug

PR: kern/38465
Obtained from: Ramana Yarlagadda <ramana.yarlagadda@analog.com>

Remove macros that are defined elsewhere.

less warning

warning: cast discards qualifiers from pointer target type

Sync with recent KAME.
This work was based on kame-20010528-freebsd43-snap.tgz and some
critical problem after the snap was out were fixed.
There are many many changes since last KAME merge.

TODO:
- The definitions of SADB_* in sys/net/pfkeyv2.h are still different
from RFC2407/IANA assignment because of binary compatibility
issue. It should be fixed under 5-CURRENT.
- ip6po_m member of struct ip6_pktopts is no longer used. But, it
is still there because of binary compatibility issue. It should
be removed under 5-CURRENT.

Reviewed by: itojun
Obtained from: KAME
MFC after: 3 weeks

Kernel crypto need binary key material, not symbolic ascii.

This commit was generated by cvs2svn to compensate for changes in r67957,
which included commits to RCS files with non-trunk default branches.