===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/49.html,v
retrieving revision 1.28
retrieving revision 1.29
diff -c -r1.28 -r1.29
*** www/49.html	2011/04/25 17:06:55	1.28
--- www/49.html	2011/04/25 17:44:07	1.29
***************
*** 149,155 ****
      <li>Reworking of the MCLGETI livelock algorithm to improve
      forwarding and host performance under high network load.</li>
      <li>Added support for socket splicing.
!     <li>Added AES-GCM support for IPSec.
      <li>Added automatic send and receive buffer scaling for TCP.
      <li>Added wpakey option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a> replacing wpa-psk(8).
      <li>TCP acknowledgments are no longer delayed on the loopback interface.
--- 149,155 ----
      <li>Reworking of the MCLGETI livelock algorithm to improve
      forwarding and host performance under high network load.</li>
      <li>Added support for socket splicing.
!     <li>Added AES-GCM support for IPsec.
      <li>Added automatic send and receive buffer scaling for TCP.
      <li>Added wpakey option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&amp;sektion=8">ifconfig(8)</a> replacing wpa-psk(8).
      <li>TCP acknowledgments are no longer delayed on the loopback interface.
***************
*** 164,169 ****
--- 164,180 ----
      </ul>
  <p>
  
+ <li>IPsec stack audit was performed resulting in:
+     <ul>
+     <li>Several potential security problems have been identified and fixed.
+     <li>ARC4 based PRNG code was audited and revamped.
+     <li>New explicit_bzero kernel function was introduced to prevent a compiler
+     from optimizing
+     <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bzero&amp;sektion=3">bzero</a>
+     calls away.
+     </ul>
+ <p>
+ 
  <li>SCSI improvements:
      <ul>
      <li>Improved safety when detaching SCSI devices by waiting for
***************
*** 831,837 ****
  alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br><small>
! $OpenBSD: 49.html,v 1.28 2011/04/25 17:06:55 mikeb Exp $
  </small>
  
  </body>
--- 842,848 ----
  alt="OpenBSD"></a>
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
  <br><small>
! $OpenBSD: 49.html,v 1.29 2011/04/25 17:44:07 mikeb Exp $
  </small>
  
  </body>