Re: 5.4 html Security Improvements section

2013-10-09 Thread Mike Belopuhov 
On 9 October 2013 19:51, Alexey E. Suslikov  wrote:
> * Added AES-XTS support to aesni crypto(4) driver on amd64.
> Allows softraid(4) to benefit from the AES-NI instructions on
> newer Intel CPUs

not at the moment, though.

Re: 5.4 html Security Improvements section

2013-10-09 Thread Alexey E. Suslikov 
Alexey E. Suslikov  gmail.com> writes:

> 
> hi tech  .
> 
> Security Improvements section needs love.
> 
> I have found these:
> 
> * rand(3)/random(3) -> arc4random*() conversion
> * new secure identd implementation (not started by default)
> * security(8) now checks npppd(8) configuration files

* more random(4) randomness from dmesg, disklabel checksum and
manufacturer-supplied bios serial/uuid;
* Added AES-XTS support to aesni crypto(4) driver on amd64.
Allows softraid(4) to benefit from the AES-NI instructions on
newer Intel CPUs
* Switched the malloc(3) and pool freelists to using xor
simpleq. Adds a tiny bit more protection from list manipulation.

5.4 html Security Improvements section

2013-10-09 Thread Alexey E. Suslikov 
hi tech@.

Security Improvements section needs love.

I have found these:

* rand(3)/random(3) -> arc4random*() conversion
* new secure identd implementation (not started by default)
* security(8) now checks npppd(8) configuration files

More?