546     int auth_alg, int minor, uint64_t seqno, struct tls_enable *en)  in build_tls_enable()  argument
550 	memset(en, 0, sizeof(*en));  in build_tls_enable()
586 	en->cipher_key = alloc_buffer(cipher_key_len);  in build_tls_enable()
587 	debug_hexdump(tc, en->cipher_key, cipher_key_len, "cipher key");  in build_tls_enable()
588 	en->iv = alloc_buffer(iv_len);  in build_tls_enable()
590 		debug_hexdump(tc, en->iv, iv_len, "iv");  in build_tls_enable()
591 	en->auth_key = alloc_buffer(auth_key_len);  in build_tls_enable()
593 		debug_hexdump(tc, en->auth_key, auth_key_len, "auth key");  in build_tls_enable()
594 	en->cipher_algorithm = cipher_alg;  in build_tls_enable()
595 	en->cipher_key_len = cipher_key_len;  in build_tls_enable()
596 	en->iv_len = iv_len;  in build_tls_enable()
597 	en->auth_algorithm = auth_alg;  in build_tls_enable()
598 	en->auth_key_len = auth_key_len;  in build_tls_enable()
599 	en->tls_vmajor = TLS_MAJOR_VER_ONE;  in build_tls_enable()
600 	en->tls_vminor = minor;  in build_tls_enable()
601 	be64enc(en->rec_seq, seqno);  in build_tls_enable()
606 free_tls_enable(struct tls_enable *en)  in free_tls_enable()  argument
608 	free(__DECONST(void *, en->cipher_key));  in free_tls_enable()
609 	free(__DECONST(void *, en->iv));  in free_tls_enable()
610 	free(__DECONST(void *, en->auth_key));  in free_tls_enable()
614 tls_EVP_CIPHER(const struct tls_enable *en)  in tls_EVP_CIPHER()  argument
616 	switch (en->cipher_algorithm) {  in tls_EVP_CIPHER()
618 		switch (en->cipher_key_len) {  in tls_EVP_CIPHER()
628 		switch (en->cipher_key_len) {  in tls_EVP_CIPHER()
645 tls_EVP_MD(const struct tls_enable *en)  in tls_EVP_MD()  argument
647 	switch (en->auth_algorithm) {  in tls_EVP_MD()
660 tls_header_len(struct tls_enable *en)  in tls_header_len()  argument
665 	switch (en->cipher_algorithm) {  in tls_header_len()
667 		if (en->tls_vminor != TLS_MINOR_VER_ZERO)  in tls_header_len()
671 		if (en->tls_vminor == TLS_MINOR_VER_TWO)  in tls_header_len()
682 tls_mac_len(struct tls_enable *en)  in tls_mac_len()  argument
684 	switch (en->cipher_algorithm) {  in tls_mac_len()
686 		switch (en->auth_algorithm) {  in tls_mac_len()
707 tls_trailer_len(struct tls_enable *en)  in tls_trailer_len()  argument
711 	len = tls_mac_len(en);  in tls_trailer_len()
712 	if (en->cipher_algorithm == CRYPTO_AES_CBC)  in tls_trailer_len()
714 	if (en->tls_vminor == TLS_MINOR_VER_THREE)  in tls_trailer_len()
721 tls_minimum_record_payload(struct tls_enable *en)  in tls_minimum_record_payload()  argument
725 	len = tls_header_len(en);  in tls_minimum_record_payload()
726 	if (en->cipher_algorithm == CRYPTO_AES_CBC)  in tls_minimum_record_payload()
727 		len += roundup2(tls_mac_len(en) + 1, AES_BLOCK_LEN);  in tls_minimum_record_payload()
729 		len += tls_mac_len(en);  in tls_minimum_record_payload()
730 	if (en->tls_vminor == TLS_MINOR_VER_THREE)  in tls_minimum_record_payload()
737 tls_mte_aad(struct tls_enable *en, size_t len,  in tls_mte_aad()  argument
748 tls_12_aead_aad(struct tls_enable *en, size_t len,  in tls_12_aead_aad()  argument
760 tls_13_aad(struct tls_enable *en, const struct tls_record_layer *hdr,  in tls_13_aad()  argument
770 tls_12_gcm_nonce(struct tls_enable *en, const struct tls_record_layer *hdr,  in tls_12_gcm_nonce()  argument
773 	memcpy(nonce, en->iv, TLS_AEAD_GCM_LEN);  in tls_12_gcm_nonce()
778 tls_13_nonce(struct tls_enable *en, uint64_t seqno, char *nonce)  in tls_13_nonce()  argument
782 	memcpy(nonce, en->iv, TLS_1_3_GCM_IV_LEN);  in tls_13_nonce()
792 decrypt_tls_aes_cbc_mte(const atf_tc_t *tc, struct tls_enable *en,  in decrypt_tls_aes_cbc_mte()  argument
804 	hdr_len = tls_header_len(en);  in decrypt_tls_aes_cbc_mte()
805 	mac_len = tls_mac_len(en);  in decrypt_tls_aes_cbc_mte()
807 	ATF_REQUIRE_INTEQ(en->tls_vminor, hdr->tls_vminor);  in decrypt_tls_aes_cbc_mte()
814 	if (en->tls_vminor == TLS_MINOR_VER_ZERO)  in decrypt_tls_aes_cbc_mte()
815 		iv = en->iv;  in decrypt_tls_aes_cbc_mte()
819 	ATF_REQUIRE(cbc_decrypt(tls_EVP_CIPHER(en), en->cipher_key, iv,  in decrypt_tls_aes_cbc_mte()
827 	if (en->tls_vminor == TLS_MINOR_VER_ZERO)  in decrypt_tls_aes_cbc_mte()
828 		memcpy(__DECONST(uint8_t *, en->iv), (const u_char *)src +  in decrypt_tls_aes_cbc_mte()
846 	tls_mte_aad(en, payload_len, hdr, seqno, &aad);  in decrypt_tls_aes_cbc_mte()
848 	ATF_REQUIRE(verify_hash(tls_EVP_MD(en), en->auth_key, en->auth_key_len,  in decrypt_tls_aes_cbc_mte()
859 decrypt_tls_12_aead(const atf_tc_t *tc, struct tls_enable *en, uint64_t seqno,  in decrypt_tls_12_aead()  argument
869 	hdr_len = tls_header_len(en);  in decrypt_tls_12_aead()
870 	mac_len = tls_mac_len(en);  in decrypt_tls_12_aead()
877 	tls_12_aead_aad(en, payload_len, hdr, seqno, &aad);  in decrypt_tls_12_aead()
879 	if (en->cipher_algorithm == CRYPTO_AES_NIST_GCM_16)  in decrypt_tls_12_aead()
880 		tls_12_gcm_nonce(en, hdr, nonce);  in decrypt_tls_12_aead()
882 		tls_13_nonce(en, seqno, nonce);  in decrypt_tls_12_aead()
885 	ATF_REQUIRE(aead_decrypt(tls_EVP_CIPHER(en), en->cipher_key, nonce,  in decrypt_tls_12_aead()
894 decrypt_tls_13_aead(const atf_tc_t *tc, struct tls_enable *en, uint64_t seqno,  in decrypt_tls_13_aead()  argument
905 	hdr_len = tls_header_len(en);  in decrypt_tls_13_aead()
906 	mac_len = tls_mac_len(en);  in decrypt_tls_13_aead()
917 	tls_13_aad(en, hdr, seqno, &aad);  in decrypt_tls_13_aead()
919 	tls_13_nonce(en, seqno, nonce);  in decrypt_tls_13_aead()
928 	ATF_REQUIRE(aead_decrypt(tls_EVP_CIPHER(en), en->cipher_key, nonce,  in decrypt_tls_13_aead()
944 decrypt_tls_aead(const atf_tc_t *tc, struct tls_enable *en, uint64_t seqno,  in decrypt_tls_aead()  argument
953 	payload_len = len - (tls_header_len(en) + tls_trailer_len(en));  in decrypt_tls_aead()
957 	if (en->tls_vminor == TLS_MINOR_VER_TWO) {  in decrypt_tls_aead()
958 		ATF_REQUIRE_INTEQ(payload_len, decrypt_tls_12_aead(tc, en,  in decrypt_tls_aead()
961 		ATF_REQUIRE_INTEQ(payload_len, decrypt_tls_13_aead(tc, en,  in decrypt_tls_aead()
969 decrypt_tls_record(const atf_tc_t *tc, struct tls_enable *en, uint64_t seqno,  in decrypt_tls_record()  argument
972 	if (en->cipher_algorithm == CRYPTO_AES_CBC)  in decrypt_tls_record()
973 		return (decrypt_tls_aes_cbc_mte(tc, en, seqno, src, len, dst,  in decrypt_tls_record()
976 		return (decrypt_tls_aead(tc, en, seqno, src, len, dst, avail,  in decrypt_tls_record()
988 encrypt_tls_aes_cbc_mte(const atf_tc_t *tc, struct tls_enable *en,  in encrypt_tls_aes_cbc_mte()  argument
1004 	hdr_len = tls_header_len(en);  in encrypt_tls_aes_cbc_mte()
1005 	mac_len = tls_mac_len(en);  in encrypt_tls_aes_cbc_mte()
1017 	hdr->tls_vminor = en->tls_vminor;  in encrypt_tls_aes_cbc_mte()
1028 	tls_mte_aad(en, len, hdr, seqno, &aad);  in encrypt_tls_aes_cbc_mte()
1031 	ATF_REQUIRE(compute_hash(tls_EVP_MD(en), en->auth_key, en->auth_key_len,  in encrypt_tls_aes_cbc_mte()
1042 	ATF_REQUIRE(cbc_encrypt(tls_EVP_CIPHER(en), en->cipher_key, iv,  in encrypt_tls_aes_cbc_mte()
1050 encrypt_tls_12_aead(const atf_tc_t *tc, struct tls_enable *en,  in encrypt_tls_12_aead()  argument
1061 	hdr_len = tls_header_len(en);  in encrypt_tls_12_aead()
1062 	mac_len = tls_mac_len(en);  in encrypt_tls_12_aead()
1069 	if (en->cipher_algorithm == CRYPTO_AES_NIST_GCM_16)  in encrypt_tls_12_aead()
1072 	tls_12_aead_aad(en, len, hdr, seqno, &aad);  in encrypt_tls_12_aead()
1074 	if (en->cipher_algorithm == CRYPTO_AES_NIST_GCM_16)  in encrypt_tls_12_aead()
1075 		tls_12_gcm_nonce(en, hdr, nonce);  in encrypt_tls_12_aead()
1077 		tls_13_nonce(en, seqno, nonce);  in encrypt_tls_12_aead()
1081 	ATF_REQUIRE(aead_encrypt(tls_EVP_CIPHER(en), en->cipher_key, nonce,  in encrypt_tls_12_aead()
1090 encrypt_tls_13_aead(const atf_tc_t *tc, struct tls_enable *en,  in encrypt_tls_13_aead()  argument
1103 	hdr_len = tls_header_len(en);  in encrypt_tls_13_aead()
1104 	mac_len = tls_mac_len(en);  in encrypt_tls_13_aead()
1112 	tls_13_aad(en, hdr, seqno, &aad);  in encrypt_tls_13_aead()
1114 	tls_13_nonce(en, seqno, nonce);  in encrypt_tls_13_aead()
1127 	ATF_REQUIRE(aead_encrypt(tls_EVP_CIPHER(en), en->cipher_key, nonce,  in encrypt_tls_13_aead()
1138 encrypt_tls_aead(const atf_tc_t *tc, struct tls_enable *en,  in encrypt_tls_aead()  argument
1144 	record_len = tls_header_len(en) + len + padding + tls_trailer_len(en);  in encrypt_tls_aead()
1147 	    tls_header_len(en), len, padding, tls_trailer_len(en));  in encrypt_tls_aead()
1149 	if (en->tls_vminor == TLS_MINOR_VER_TWO) {  in encrypt_tls_aead()
1151 		ATF_REQUIRE_INTEQ(record_len, encrypt_tls_12_aead(tc, en,  in encrypt_tls_aead()
1154 		ATF_REQUIRE_INTEQ(record_len, encrypt_tls_13_aead(tc, en,  in encrypt_tls_aead()
1161 encrypt_tls_record(const atf_tc_t *tc, struct tls_enable *en,  in encrypt_tls_record()  argument
1165 	if (en->cipher_algorithm == CRYPTO_AES_CBC)  in encrypt_tls_record()
1166 		return (encrypt_tls_aes_cbc_mte(tc, en, record_type, seqno, src,  in encrypt_tls_record()
1169 		return (encrypt_tls_aead(tc, en, record_type, seqno, src, len,  in encrypt_tls_record()
1174 test_ktls_transmit_app_data(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_transmit_app_data()  argument
1188 	outbuf_cap = tls_header_len(en) + TLS_MAX_MSG_SIZE_V10_2 +  in test_ktls_transmit_app_data()
1189 	    tls_trailer_len(en);  in test_ktls_transmit_app_data()
1197 	ATF_REQUIRE(setsockopt(sockets[1], IPPROTO_TCP, TCP_TXTLS_ENABLE, en,  in test_ktls_transmit_app_data()
1198 	    sizeof(*en)) == 0);  in test_ktls_transmit_app_data()
1272 				decrypted_len += decrypt_tls_record(tc, en,  in test_ktls_transmit_app_data()
1325 test_ktls_transmit_control(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_transmit_control()  argument
1339 	outbuf_cap = tls_header_len(en) + len + tls_trailer_len(en);  in test_ktls_transmit_control()
1345 	ATF_REQUIRE(setsockopt(sockets[1], IPPROTO_TCP, TCP_TXTLS_ENABLE, en,  in test_ktls_transmit_control()
1346 	    sizeof(*en)) == 0);  in test_ktls_transmit_control()
1368 	rv = decrypt_tls_record(tc, en, seqno, outbuf, record_len, decrypted,  in test_ktls_transmit_control()
1385 test_ktls_transmit_empty_fragment(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_transmit_empty_fragment()  argument
1395 	outbuf_cap = tls_header_len(en) + tls_trailer_len(en);  in test_ktls_transmit_empty_fragment()
1401 	ATF_REQUIRE(setsockopt(sockets[1], IPPROTO_TCP, TCP_TXTLS_ENABLE, en,  in test_ktls_transmit_empty_fragment()
1402 	    sizeof(*en)) == 0);  in test_ktls_transmit_empty_fragment()
1414 		ATF_REQUIRE_INTEQ(CRYPTO_AES_CBC, en->cipher_algorithm);  in test_ktls_transmit_empty_fragment()
1415 		ATF_REQUIRE_INTEQ(TLS_MINOR_VER_ZERO, en->tls_vminor);  in test_ktls_transmit_empty_fragment()
1436 	rv = decrypt_tls_record(tc, en, seqno, outbuf, record_len, NULL, 0,  in test_ktls_transmit_empty_fragment()
1450 ktls_receive_tls_record(struct tls_enable *en, int fd, uint8_t record_type,  in ktls_receive_tls_record()  argument
1482 	ATF_REQUIRE_INTEQ(en->tls_vmajor, tgr->tls_vmajor);  in ktls_receive_tls_record()
1484 	if (en->tls_vminor == TLS_MINOR_VER_THREE)  in ktls_receive_tls_record()
1487 		ATF_REQUIRE_INTEQ(en->tls_vminor, tgr->tls_vminor);  in ktls_receive_tls_record()
1494 test_ktls_receive_app_data(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_app_data()  argument
1505 	outbuf_cap = tls_header_len(en) + TLS_MAX_MSG_SIZE_V10_2 +  in test_ktls_receive_app_data()
1506 	    tls_trailer_len(en);  in test_ktls_receive_app_data()
1513 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_app_data()
1514 	    sizeof(*en)) == 0);  in test_ktls_receive_app_data()
1539 				outbuf_len = encrypt_tls_record(tc, en,  in test_ktls_receive_app_data()
1569 			rv = ktls_receive_tls_record(en, ev.ident,  in test_ktls_receive_app_data()
1615 test_ktls_receive_corrupted_record(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_corrupted_record()  argument
1626 	outbuf_cap = tls_header_len(en) + len + tls_trailer_len(en);  in test_ktls_receive_corrupted_record()
1631 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_corrupted_record()
1632 	    sizeof(*en)) == 0);  in test_ktls_receive_corrupted_record()
1638 	outbuf_len = encrypt_tls_record(tc, en, TLS_RLTYPE_APP, seqno,  in test_ktls_receive_corrupted_record()
1658 test_ktls_receive_corrupted_iv(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_corrupted_iv()  argument
1661 	ATF_REQUIRE(tls_header_len(en) > sizeof(struct tls_record_layer));  in test_ktls_receive_corrupted_iv()
1664 	test_ktls_receive_corrupted_record(tc, en, seqno, len,  in test_ktls_receive_corrupted_iv()
1669 test_ktls_receive_corrupted_data(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_corrupted_data()  argument
1675 	test_ktls_receive_corrupted_record(tc, en, seqno, len,  in test_ktls_receive_corrupted_data()
1676 	    tls_header_len(en));  in test_ktls_receive_corrupted_data()
1680 test_ktls_receive_corrupted_mac(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_corrupted_mac()  argument
1686 	if (en->cipher_algorithm == CRYPTO_AES_CBC)  in test_ktls_receive_corrupted_mac()
1687 		offset = tls_header_len(en) + len;  in test_ktls_receive_corrupted_mac()
1689 		offset = -tls_mac_len(en);  in test_ktls_receive_corrupted_mac()
1690 	test_ktls_receive_corrupted_record(tc, en, seqno, len, offset);  in test_ktls_receive_corrupted_mac()
1694 test_ktls_receive_corrupted_padding(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_corrupted_padding()  argument
1697 	ATF_REQUIRE_INTEQ(CRYPTO_AES_CBC, en->cipher_algorithm);  in test_ktls_receive_corrupted_padding()
1700 	test_ktls_receive_corrupted_record(tc, en, seqno, len, -1);  in test_ktls_receive_corrupted_padding()
1704 test_ktls_receive_truncated_record(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_truncated_record()  argument
1715 	outbuf_cap = tls_header_len(en) + len + tls_trailer_len(en);  in test_ktls_receive_truncated_record()
1720 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_truncated_record()
1721 	    sizeof(*en)) == 0);  in test_ktls_receive_truncated_record()
1727 	outbuf_len = encrypt_tls_record(tc, en, TLS_RLTYPE_APP, seqno,  in test_ktls_receive_truncated_record()
1744 test_ktls_receive_bad_major(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_bad_major()  argument
1756 	outbuf_cap = tls_header_len(en) + len + tls_trailer_len(en);  in test_ktls_receive_bad_major()
1761 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_bad_major()
1762 	    sizeof(*en)) == 0);  in test_ktls_receive_bad_major()
1768 	outbuf_len = encrypt_tls_record(tc, en, TLS_RLTYPE_APP, seqno,  in test_ktls_receive_bad_major()
1786 test_ktls_receive_bad_minor(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_bad_minor()  argument
1798 	outbuf_cap = tls_header_len(en) + len + tls_trailer_len(en);  in test_ktls_receive_bad_minor()
1803 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_bad_minor()
1804 	    sizeof(*en)) == 0);  in test_ktls_receive_bad_minor()
1810 	outbuf_len = encrypt_tls_record(tc, en, TLS_RLTYPE_APP, seqno,  in test_ktls_receive_bad_minor()
1828 test_ktls_receive_bad_type(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_bad_type()  argument
1838 	ATF_REQUIRE_INTEQ(TLS_MINOR_VER_THREE, en->tls_vminor);  in test_ktls_receive_bad_type()
1841 	outbuf_cap = tls_header_len(en) + len + tls_trailer_len(en);  in test_ktls_receive_bad_type()
1846 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_bad_type()
1847 	    sizeof(*en)) == 0);  in test_ktls_receive_bad_type()
1853 	outbuf_len = encrypt_tls_record(tc, en, 0x21 /* Alert */, seqno,  in test_ktls_receive_bad_type()
1871 test_ktls_receive_bad_size(const atf_tc_t *tc, struct tls_enable *en,  in test_ktls_receive_bad_size()  argument
1885 	ATF_REQUIRE(setsockopt(sockets[0], IPPROTO_TCP, TCP_RXTLS_ENABLE, en,  in test_ktls_receive_bad_size()
1886 	    sizeof(*en)) == 0);  in test_ktls_receive_bad_size()
1893 	hdr->tls_vmajor = en->tls_vmajor;  in test_ktls_receive_bad_size()
1894 	if (en->tls_vminor == TLS_MINOR_VER_THREE)  in test_ktls_receive_bad_size()
1897 		hdr->tls_vminor = en->tls_vminor;  in test_ktls_receive_bad_size()
1982 	struct tls_enable en;						\
1988 	    seqno, &en);						\
1989 	test_ktls_transmit_app_data(tc, &en, seqno, len);		\
1990 	free_tls_enable(&en);						\
2002 	struct tls_enable en;						\
2008 	    seqno, &en);						\
2009 	test_ktls_transmit_control(tc, &en, seqno, type, len);		\
2010 	free_tls_enable(&en);						\
2022 	struct tls_enable en;						\
2028 	    seqno, &en);						\
2029 	test_ktls_transmit_empty_fragment(tc, &en, seqno);		\
2030 	free_tls_enable(&en);						\
2161     struct tls_enable *en)  in test_ktls_invalid_transmit_cipher_suite()  argument
2168 	    TCP_TXTLS_ENABLE, en, sizeof(*en)) == -1);  in test_ktls_invalid_transmit_cipher_suite()
2178 	struct tls_enable en;						\
2184 	    seqno, &en);						\
2185 	test_ktls_invalid_transmit_cipher_suite(tc, &en);		\
2186 	free_tls_enable(&en);						\
2227 	struct tls_enable en;						\
2233 	    seqno, &en);						\
2234 	test_ktls_receive_app_data(tc, &en, seqno, len, padding);	\
2235 	free_tls_enable(&en);						\
2247 	struct tls_enable en;						\
2253 	    seqno, &en);						\
2254 	test_ktls_receive_corrupted_data(tc, &en, seqno, len);		\
2255 	free_tls_enable(&en);						\
2267 	struct tls_enable en;						\
2273 	    seqno, &en);						\
2274 	test_ktls_receive_corrupted_mac(tc, &en, seqno, len);		\
2275 	free_tls_enable(&en);						\
2287 	struct tls_enable en;						\
2293 	    seqno, &en);						\
2294 	test_ktls_receive_truncated_record(tc, &en, seqno, len);	\
2295 	free_tls_enable(&en);						\
2307 	struct tls_enable en;						\
2313 	    seqno, &en);						\
2314 	test_ktls_receive_bad_major(tc, &en, seqno, len);		\
2315 	free_tls_enable(&en);						\
2327 	struct tls_enable en;						\
2333 	    seqno, &en);						\
2334 	test_ktls_receive_bad_minor(tc, &en, seqno, len);		\
2335 	free_tls_enable(&en);						\
2347 	struct tls_enable en;						\
2353 	    seqno, &en);						\
2354 	test_ktls_receive_bad_size(tc, &en, seqno, (len));		\
2355 	free_tls_enable(&en);						\
2380 	    tls_minimum_record_payload(&en) - 1)			\
2515 	struct tls_enable en;						\
2521 	    seqno, &en);						\
2522 	test_ktls_receive_corrupted_padding(tc, &en, seqno, len);	\
2523 	free_tls_enable(&en);						\
2538 	    tls_minimum_record_payload(&en) + 1)
2572 	struct tls_enable en;						\
2578 	    seqno, &en);						\
2579 	test_ktls_receive_corrupted_iv(tc, &en, seqno, 64);		\
2580 	free_tls_enable(&en);						\
2615 	struct tls_enable en;						\
2621 	    seqno, &en);						\
2622 	test_ktls_receive_bad_type(tc, &en, seqno, len);		\
2623 	free_tls_enable(&en);						\
2657     struct tls_enable *en)  in test_ktls_invalid_receive_cipher_suite()  argument
2664 	    TCP_RXTLS_ENABLE, en, sizeof(*en)) == -1);  in test_ktls_invalid_receive_cipher_suite()
2674 	struct tls_enable en;						\
2680 	    seqno, &en);						\
2681 	test_ktls_invalid_receive_cipher_suite(tc, &en);		\
2682 	free_tls_enable(&en);						\
2696     struct tls_enable *en)  in test_ktls_unsupported_receive_cipher_suite()  argument
2703 	    TCP_RXTLS_ENABLE, en, sizeof(*en)) == -1);  in test_ktls_unsupported_receive_cipher_suite()
2713 	struct tls_enable en;						\
2719 	    seqno, &en);						\
2720 	test_ktls_unsupported_receive_cipher_suite(tc, &en);		\
2721 	free_tls_enable(&en);						\
2743 	struct tls_enable en;  in ATF_TC_BODY()  local
2753 	    TLS_MINOR_VER_THREE, (uint64_t)random(), &en);  in ATF_TC_BODY()
2755 	ATF_REQUIRE(setsockopt(s, IPPROTO_TCP, TCP_TXTLS_ENABLE, &en,  in ATF_TC_BODY()
2756 	    sizeof(en)) == 0);  in ATF_TC_BODY()
2780 	struct tls_enable en;  in ATF_TC_BODY()  local
2789 	    TLS_MINOR_VER_THREE, (uint64_t)random(), &en);  in ATF_TC_BODY()
2790 	ATF_REQUIRE(setsockopt(s, IPPROTO_TCP, TCP_TXTLS_ENABLE, &en,  in ATF_TC_BODY()
2791 	    sizeof(en)) == 0);  in ATF_TC_BODY()
2798 	    TLS_MINOR_VER_THREE, (uint64_t)random(), &en);  in ATF_TC_BODY()
2799 	ATF_REQUIRE(setsockopt(s, IPPROTO_TCP, TCP_RXTLS_ENABLE, &en,  in ATF_TC_BODY()
2800 	    sizeof(en)) == 0);  in ATF_TC_BODY()
2812 	    TLS_MINOR_VER_THREE, (uint64_t)random(), &en);  in ATF_TC_BODY()
2814 	    setsockopt(s, IPPROTO_TCP, TCP_TXTLS_ENABLE, &en, sizeof(en)) != 0);  in ATF_TC_BODY()
2816 	    setsockopt(s, IPPROTO_TCP, TCP_RXTLS_ENABLE, &en, sizeof(en)) != 0);  in ATF_TC_BODY()