HomeFreeBSD

EKCD: Add Chacha20 encryption mode

Description

EKCD: Add Chacha20 encryption mode

Add Chacha20 mode to Encrypted Kernel Crash Dumps.

Chacha20 does not require messages to be multiples of block size, so it is
valid to use the cipher on non-block-sized messages without the explicit
padding AES-CBC would require. Therefore, allow use with simultaneous dump
compression. (Continue to disallow use of AES-CBC EKCD with compression.)

dumpon(8) gains a -C cipher flag to select between chacha and aes-cbc.
It defaults to chacha if no -C option is provided. The man page documents this
behavior.

Relnotes: sure
Sponsored by: Dell EMC Isilon

Details

Provenance
cemAuthored on May 23 2019, 8:12 PM
Parents
rG8a2ad0aec8df: loader: Remove unused variable
Branches
Unknown
Tags
Unknown

Event Timeline