Re: 5.4 html Security Improvements section
On 9 October 2013 19:51, Alexey E. Suslikov wrote: > * Added AES-XTS support to aesni crypto(4) driver on amd64. > Allows softraid(4) to benefit from the AES-NI instructions on > newer Intel CPUs not at the moment, though.
Re: 5.4 html Security Improvements section
Alexey E. Suslikov gmail.com> writes: > > hi tech . > > Security Improvements section needs love. > > I have found these: > > * rand(3)/random(3) -> arc4random*() conversion > * new secure identd implementation (not started by default) > * security(8) now checks npppd(8) configuration files * more random(4) randomness from dmesg, disklabel checksum and manufacturer-supplied bios serial/uuid; * Added AES-XTS support to aesni crypto(4) driver on amd64. Allows softraid(4) to benefit from the AES-NI instructions on newer Intel CPUs * Switched the malloc(3) and pool freelists to using xor simpleq. Adds a tiny bit more protection from list manipulation.
5.4 html Security Improvements section
hi tech@. Security Improvements section needs love. I have found these: * rand(3)/random(3) -> arc4random*() conversion * new secure identd implementation (not started by default) * security(8) now checks npppd(8) configuration files More?