From patchwork Thu Oct 31 04:54:58 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Hemant Agrawal X-Patchwork-Id: 178137 Delivered-To: patch@linaro.org Received: by 2002:a92:409a:0:0:0:0:0 with SMTP id d26csp2280072ill; Wed, 30 Oct 2019 21:58:21 -0700 (PDT) X-Google-Smtp-Source: APXvYqz0ISJOVXwP8d6rge3eQYk98I/5LLa/SAFpRbfkSKvCBV7bTRZWdu0SGQsykhbJ/Qt5Sj7k X-Received: by 2002:a17:907:2130:: with SMTP id qo16mr1830845ejb.183.1572497901488; Wed, 30 Oct 2019 21:58:21 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1572497901; cv=none; d=google.com; s=arc-20160816; b=H9ReFgtiq3+EgSVqeg8RCbQXOW3rre8QmGN/BJ1W79JN1/8V5wdmrCSe4vN171K9Q6 9svC8kKCjAmObDIpSRQHn9KNuEORcRgsV5XLNf4n72i8/jesJc5kl3oOUk9DclVL6FRE fvLe9J+O42NDaUEYJcTSjUcBI6C3M1isstydlWZ5SfX674KorOo3fuH4GgT6ZGqcUH40 TApLGaw/3MukUBT5ZlY5rzlsqtiVPzkDkDznDNVs1lBAm2rLSB0iXVdlzI+Ocr5YbNHd R0QUNUYNMaRfViHEBs2nF2rFIPAJRDImhFF9AILVDgssDWYgGdD3mBDKVWurlAC/ICrm U/jg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:list-subscribe:list-help:list-post:list-archive :list-unsubscribe:list-id:precedence:subject:references:in-reply-to :message-id:date:cc:to:from; bh=Quhm0cKPQZV98gJT5BCUooY1ZF13htb0/jTqFBDzJgo=; b=tuhxL2oBSRl8vbV4pcH6K8xBWFnC1T6OwNbga+AFE811hVUTHq/Ma3WGvjEaAS+2Ep iv4FokPwUTHuT4F2W+1n1ZLYy8UESgA/0eWr8/5X2jBwEsQY+TAU47mGOoVaMQ/GWjBO r26NAJlfa8CwAkk8i95umoT7pDoR2sCYDoCbybycUi8BE+Dhu4fRNDRzP3MMNb0yh2vC +xmSPi2AiKlq7SDEogwPdD+miUSlmb+chSxFTqJz3q3LxTAfTthEL/r2yMYzIaq3//Qo Hv9LDIcFXK/PcRIk2OLyJneWkoxPz0a3M+7va0R/MSjFF2EYiOvEtcsSDKPCU46dgdh+ 5tyg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of dev-bounces@dpdk.org designates 92.243.14.124 as permitted sender) smtp.mailfrom=dev-bounces@dpdk.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nxp.com Return-Path: Received: from dpdk.org (dpdk.org. [92.243.14.124]) by mx.google.com with ESMTP id k24si3179849edk.367.2019.10.30.21.58.21; Wed, 30 Oct 2019 21:58:21 -0700 (PDT) Received-SPF: pass (google.com: domain of dev-bounces@dpdk.org designates 92.243.14.124 as permitted sender) client-ip=92.243.14.124; Authentication-Results: mx.google.com; spf=pass (google.com: domain of dev-bounces@dpdk.org designates 92.243.14.124 as permitted sender) smtp.mailfrom=dev-bounces@dpdk.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=nxp.com Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id EF2B21C1C7; Thu, 31 Oct 2019 05:58:07 +0100 (CET) Received: from inva020.nxp.com (inva020.nxp.com [92.121.34.13]) by dpdk.org (Postfix) with ESMTP id 1D5211BFE4 for ; Thu, 31 Oct 2019 05:58:03 +0100 (CET) Received: from inva020.nxp.com (localhost [127.0.0.1]) by inva020.eu-rdc02.nxp.com (Postfix) with ESMTP id DE0831A04DB; Thu, 31 Oct 2019 05:58:02 +0100 (CET) Received: from invc005.ap-rdc01.nxp.com (invc005.ap-rdc01.nxp.com [165.114.16.14]) by inva020.eu-rdc02.nxp.com (Postfix) with ESMTP id B1A5C1A04B5; Thu, 31 Oct 2019 05:58:00 +0100 (CET) Received: from bf-netperf1.ap.freescale.net (bf-netperf1.ap.freescale.net [10.232.133.63]) by invc005.ap-rdc01.nxp.com (Postfix) with ESMTP id D226E402B7; Thu, 31 Oct 2019 12:57:57 +0800 (SGT) From: Hemant Agrawal To: dev@dpdk.org, akhil.goyal@nxp.com Cc: konstantin.ananyev@intel.com, Hemant Agrawal Date: Thu, 31 Oct 2019 10:24:58 +0530 Message-Id: <20191031045458.29166-3-hemant.agrawal@nxp.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20191031045458.29166-1-hemant.agrawal@nxp.com> References: <20191030085701.13815-1-hemant.agrawal@nxp.com> <20191031045458.29166-1-hemant.agrawal@nxp.com> X-Virus-Scanned: ClamAV using ClamSMTP Subject: [dpdk-dev] [PATCH v4 3/3] crypto/dpaa2_sec: enable anti replay window config X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" This patch usages the anti replay window size to config the anti replay checking in decap path for lookaside IPSEC offload Signed-off-by: Hemant Agrawal --- drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c | 21 +++++++++++++++++ drivers/crypto/dpaa_sec/dpaa_sec.c | 26 +++++++++++++++++++++ 2 files changed, 47 insertions(+) -- 2.17.1 diff --git a/drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c b/drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c index 7364b78e7..d7d95bf80 100644 --- a/drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c +++ b/drivers/crypto/dpaa2_sec/dpaa2_sec_dpseci.c @@ -2887,6 +2887,27 @@ dpaa2_sec_set_ipsec_session(struct rte_cryptodev *dev, sizeof(struct rte_ipv6_hdr) << 16; if (ipsec_xform->options.esn) decap_pdb.options |= PDBOPTS_ESP_ESN; + + if (ipsec_xform->replay_win_sz) { + uint32_t win_sz; + win_sz = rte_align32pow2(ipsec_xform->replay_win_sz); + + switch (win_sz) { + case 1: + case 2: + case 4: + case 8: + case 16: + case 32: + decap_pdb.options |= PDBOPTS_ESP_ARS32; + break; + case 64: + decap_pdb.options |= PDBOPTS_ESP_ARS64; + break; + default: + decap_pdb.options |= PDBOPTS_ESP_ARS128; + } + } session->dir = DIR_DEC; bufsize = cnstr_shdsc_ipsec_new_decap(priv->flc_desc[0].desc, 1, 0, SHR_SERIAL, diff --git a/drivers/crypto/dpaa_sec/dpaa_sec.c b/drivers/crypto/dpaa_sec/dpaa_sec.c index a828b23c7..f5f18457a 100644 --- a/drivers/crypto/dpaa_sec/dpaa_sec.c +++ b/drivers/crypto/dpaa_sec/dpaa_sec.c @@ -2832,6 +2832,32 @@ dpaa_sec_set_ipsec_session(__rte_unused struct rte_cryptodev *dev, sizeof(struct rte_ipv6_hdr) << 16; if (ipsec_xform->options.esn) session->decap_pdb.options |= PDBOPTS_ESP_ESN; + if (ipsec_xform->replay_win_sz) { + uint32_t win_sz; + win_sz = rte_align32pow2(ipsec_xform->replay_win_sz); + + switch (win_sz) { + case 1: + case 2: + case 4: + case 8: + case 16: + case 32: + if (ipsec_xform->options.esn) + session->decap_pdb.options |= + PDBOPTS_ESP_ARS64; + else + session->decap_pdb.options |= + PDBOPTS_ESP_ARS32; + break; + case 64: + session->decap_pdb.options |= PDBOPTS_ESP_ARS64; + break; + default: + session->decap_pdb.options |= + PDBOPTS_ESP_ARS128; + } + } session->dir = DIR_DEC; } else goto out;