CVS commit: src

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    src
Committed By:   nia
Date:           Mon Nov 22 14:34:35 UTC 2021

Modified Files:
        src/lib: Makefile
        src/sbin/cgdconfig: Makefile cgdconfig.8 cgdconfig.c cgdlex.l
            cgdparse.y params.c params.h
Added Files:
        src/external/apache2/argon2/lib/libargon2: Makefile
        src/sbin/cgdconfig: argon2_utils.c argon2_utils.h

Log Message:
cgdconfig(8): Add an argon2id password-based key generation method

This provides an extra level of side-channel and cracking resistance
compared to the pre-existing pkcs5_pbkdf2/sha1 method used for
password-based disk encryption.

Several new keygen parameters are supported:

        memory (integer, in kilobytes)
        parallelism (integer, usually the number of CPU cores)
        version (integer, usually 19...)

We do our best to calibrate these automatically when the paramsfile
is initially generated.

lgtm riastradh@


To generate a diff of this commit:
cvs rdiff -u -r0 -r1.4 src/external/apache2/argon2/lib/libargon2/Makefile
cvs rdiff -u -r1.292 -r1.293 src/lib/Makefile
cvs rdiff -u -r1.15 -r1.16 src/sbin/cgdconfig/Makefile
cvs rdiff -u -r0 -r1.1 src/sbin/cgdconfig/argon2_utils.c \
    src/sbin/cgdconfig/argon2_utils.h
cvs rdiff -u -r1.50 -r1.51 src/sbin/cgdconfig/cgdconfig.8
cvs rdiff -u -r1.52 -r1.53 src/sbin/cgdconfig/cgdconfig.c
cvs rdiff -u -r1.5 -r1.6 src/sbin/cgdconfig/cgdlex.l \
    src/sbin/cgdconfig/cgdparse.y
cvs rdiff -u -r1.31 -r1.32 src/sbin/cgdconfig/params.c
cvs rdiff -u -r1.11 -r1.12 src/sbin/cgdconfig/params.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.