wg: Refactor cookie functions to make cookie_{checker,maker} opaque

- Rename cookie_{checker,maker}_init() to cookie_{checker,maker}_alloc(),
in symmetry with cookie_{checker,maker}_free().
- Make

wg: Refactor cookie functions to make cookie_{checker,maker} opaque

- Rename cookie_{checker,maker}_init() to cookie_{checker,maker}_alloc(),
in symmetry with cookie_{checker,maker}_free().
- Make cookie_{checker,maker} structs opaque, and move them from
wg_cookie.h to wg_cookie.c.
- Update if_wg.c and selftest code accordingly.

show more ...

wg: Remove INET option and the 'opt_inet.h' header

DragonFly generally assumes INET always available, and doesn't actually
support an IPv6-only setup. So remove the INET option to clean up the
code

wg: Remove INET option and the 'opt_inet.h' header

DragonFly generally assumes INET always available, and doesn't actually
support an IPv6-only setup. So remove the INET option to clean up the
code a bit.

show more ...

wg: Change some functions to return boolean for clarity

These functions are used in 'if' conditional, so only a boolean return
value if necessary. Change them to return a boolean to make the code
r

wg: Change some functions to return boolean for clarity

These functions are used in 'if' conditional, so only a boolean return
value if necessary. Change them to return a boolean to make the code
read more clearly.

show more ...

wg: Replace strlen() with 'sizeof' in wg_{cookie,noise}.c

Get rid of unnecessary strlen() calls.

wg: Update copyright headers and inclusion guards

- Add the content of the ISC License to the copyright headers.
- Add a copyright of me to 'if_wg.c' and 'wg_noise.c', which have been
significantl

wg: Update copyright headers and inclusion guards

- Add the content of the ISC License to the copyright headers.
- Add a copyright of me to 'if_wg.c' and 'wg_noise.c', which have been
significantly updated by me.
- Rename the inclusion guards to match the style of our existing
headers.

show more ...

wg: Rename macro 'SELFTESTS' to 'WG_SELFTESTS'

To make it more clear and avoid possible conflicts with others.

wg: Fix and clean up header inclusions

wg: Style cleanups and minor updates to wg_cookie.[ch]

- Adjust code style to align with ours.
- Move inline functions to the file top.
- Add the 'const' qualifier to function parameters as much as

wg: Style cleanups and minor updates to wg_cookie.[ch]

- Adjust code style to align with ours.
- Move inline functions to the file top.
- Add the 'const' qualifier to function parameters as much as possible.
- Move 'cookie_checker_validate_macs()' function to group the functions
better.
- Zero the input ratelimit struct in ratelimit_init().
- Fix and adjust the comments a bit.

show more ...

wg: Port #28: adapt crypto code (chacha20poly1305)

Update to use the chacha20poly1305 implemention from
'crypto/chachapoly.[ch]'. Remove the obsolete code 'wg_crypto.c'.

Meanwhile, rename the orig

wg: Port #28: adapt crypto code (chacha20poly1305)

Update to use the chacha20poly1305 implemention from
'crypto/chachapoly.[ch]'. Remove the obsolete code 'wg_crypto.c'.

Meanwhile, rename the original 'uint64_t nonce' to 'counter' to avoid
confusing with the 96-bit nonce (byte string) of ChaCha20-Poly1305.

show more ...

wg: Port #27: adapt crypto code (curve25519, blake2s, siphash)

I've imported OpenBSD's blake2s implementation to 'crypto/blake2s', so
don't need the 'COMPAT_NEED_BLAKE2S' code in 'wg_crypto.c'.

wg: Port #21: replace sbintime_t with timespec/getnanouptime()

Partially based on OpenBSD's wg code.

wg: Port #19: adjust callout(9) API and replace MSEC_2_TICKS() macro

wg: Port #18: adjust arc4random* functions

wg: Port #12: remove unsupported vnet code and use if_clone only

In addition, change the module unloading logic a bit: prevent from
unloading and return the EBUSY error if the module is still in use.

wg: Port #6: replace CK_* and *_SAFE list/queue macros

wg: Port #3: replace uma(9) with objcache(9)

Note that the ocflags of objcache_get() is only used when a new object
needs to be allocated using the backend allocator, so we cannot depend
on flags su

wg: Port #3: replace uma(9) with objcache(9)

Note that the ocflags of objcache_get() is only used when a new object
needs to be allocated using the backend allocator, so we cannot depend
on flags such as M_ZERO. As a result, we manually bzero() the allocated
object before using it.

show more ...

wg: Port #2: replace mutex with lockmgr(9)

Although we also have the mutex(9) API, but our lockmgr(9) API is more
versatile and heavily optimized. So replace mutex with lockmgr as well.

wg: Port #1: replace rwlock with lockmgr(9)

wg: Import from FreeBSD without any modifications

From FreeBSD main branch as of 2023-09-19.

Kernel module/driver:
- sys/dev/wg/compat.h
- sys/dev/wg/crypto.h
- sys/dev/wg/if_wg.c
- sys/dev/wg/if_w

wg: Import from FreeBSD without any modifications

From FreeBSD main branch as of 2023-09-19.

Kernel module/driver:
- sys/dev/wg/compat.h
- sys/dev/wg/crypto.h
- sys/dev/wg/if_wg.c
- sys/dev/wg/if_wg.h
- sys/dev/wg/version.h
- sys/dev/wg/wg_cookie.c
- sys/dev/wg/wg_cookie.h
- sys/dev/wg/wg_crypto.c
- sys/dev/wg/wg_noise.c
- sys/dev/wg/wg_noise.h

Module makefile:
- sys/modules/if_wg/Makefile

Man page:
- share/man/man4/wg.4

show more ...