Lines Matching +full:crypto +full:- +full:engine

39 .Cd "device crypto"
65 by attaching a cryptographic checksum computed using one-way hash functions.
73 Transport mode is used to protect peer-to-peer communication between end nodes.
78 .Xr crypto 4
90 .Bl -column net.inet6.ipsec6.filtertunnel default enable
98 is controlled by a key management and policy engine,
106 The key management engine can be accessed from userland by using
113 The policy engine is controlled by an extension to the
124 which are similar to the per-packet filters.
127 interface is used to define per-socket behavior, and
129 interface is used to define host-wide default behavior.
140 configuring per-socket policies using the
142 system calls, or by configuring kernel level packet filter-based
155 may be used to configure per-socket security policies.
156 A properly-formed IPsec policy specification structure can be
186 .Bl -column net.inet6.ipsec6.esp_trans_deflev integerxxx
211 .Bl -column net.inet6.ipsec6.def_policy integerxxx
223 .Bl -column net.inet.ipcomp.ipcomp_enable
233 .Bl -column net.inet6.ipsec6.inbonud_call_ike integerxxx
247 .Bl -tag -width 6n
249 If set to non-zero, the kernel clears the type-of-service field in the IPv4 header
251 This variable is used to get current systems to inter-operate with devices that
253 It should be set to non-zero
254 (clear the type-of-service field)
261 The variable is used for inter-operating with devices that
274 If set to non-zero, IPv4 IPsec tunnel encapsulation/decapsulation behavior will
278 .Li draft-ietf-ipsec-ecn-02.txt .
282 If set to non-zero, debug messages will be generated via
287 If set to a non-zero value, the kernel fully recomputes checksums for
298 If this variable is set to a non-zero value, each packet handled by IPsec
310 protocol acts as a plug-in to the
315 those IP-layer protocols.
334 .Xr crypto 4 ,
369 .%N "draft-mcdonald-simple-ipsec-api-03.txt"
394 .Xr crypto 4
407 There is no single standard for the policy engine API,
408 so the policy engine API described herein is just for this implementation.
415 .Dq Li esp/tunnel/A-B/use ah/transport/A-B/require ) ,
424 The issue will be solved when we revamp our policy engine to keep all the