FreeBSD Source Repository

libsodium (Sodium) is a portable, cross-compilable software library designed for high-level cryptographic operations. It provides an easy-to-use API for:

• Encryption and decryption
• Digital signatures
• Password hashing
• Core operations for building higher-level cryptographic tools

It is a fork of NaCl with a compatible API and extended functionality. It supports multiple platforms including Windows (MingW or Visual Studio, x86/x64), iOS, Android, JavaScript, and WebAssembly.

Portable OpenSSH is a complete implementation of the SSH protocol (version 2) designed for secure remote login, command execution, and file transfer. It is a port of OpenBSD's OpenSSH to most Unix-like operating systems (Linux, OS X, Cygwin).

Key components include:

• ssh: The client utility.
• sshd: The server daemon.
• scp and sftp: File transfer utilities.
• ssh-keygen: Key generation tool.
• ssh-agent: Run-time key storage.
• Various supporting programs.

OpenSSL is a full-featured Open Source Toolkit for TLS, DTLS, and QUIC protocols. It consists of three primary components:

• libssl: Implements TLS protocol versions up to TLSv1.3 ([RFC 8446]), DTLS protocol versions up to DTLSv1.2 ([RFC 6347]), and the QUIC version 1 protocol ([RFC 9000]).
• libcrypto: A general-purpose cryptographic library that serves as the basis for the TLS implementation but can be used independently.
• openssl: A command-line tool used for cryptographic tasks such as key parameter creation, X.509 certificate/CSR/CRL management, message digest calculation, encryption/decryption, and protocol testing (SSL/TLS/DTLS/QUIC).

dma is a lightweight Mail Transport Agent (MTA) intended for home and office use. It functions by accepting mail from locally installed Mail User Agents (MUA) and delivering it either locally or to remote destinations.

Key features include:

• Remote delivery support
• TLS/SSL support
• SMTP authentication

Note: dma is not a replacement for full-scale MTAs like sendmail(8) or postfix(1). It does not listen on port 25 for incoming connections.

libfido2 is a library and command-line toolset used to communicate with FIDO devices over USB or NFC. It is used to verify attestation and assertion signatures and supports both FIDO U2F (CTAP 1) and FIDO2 (CTAP 2) protocols.

Dependencies:

• libcbor
• OpenSSL 1.1 or newer
• zlib
• libudev (Linux only)

CTL is a pluggable framework for SCSI targets in FreeBSD. It utilizes a modular architecture consisting of:

• Frontends: Port interfaces that make LUNs visible to initiators (e.g., ctl_frontend_cam_sim.c allows using CTL without target-capable hardware).
• Backends: Storage providers that supply data to LUNs. Supported backends include:
  • Block/File Backend: Uses arbitrary files or block devices as backing stores.
  • Ramdisk Backend: A memory-based backend used for testing throughput or extremely large LUNs.
• High Availability (HA): Supports HA modes and TCP-based interlinks via ctl_ha.c.

AddressSanitizer (ASan) is a runtime library used for detecting memory errors. The runtime is composed of several internal components:

• lib/interception/: Machinery for intercepting function calls.
• lib/sanitizer_common/: Shared code used across various sanitizers.
• lib/lsan/: Embedded LeakSanitizer components (lsan_common.{cc,h}) used for leak detection.

Note that the ASan runtime can only be built using CMake.