Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/132278/?format=api
{ "id": 132278, "url": "http://patches.dpdk.org/api/patches/132278/?format=api", "web_url": "http://patches.dpdk.org/project/dpdk/patch/20231003104854.1381-4-anoobj@marvell.com/", "project": { "id": 1, "url": "http://patches.dpdk.org/api/projects/1/?format=api", "name": "DPDK", "link_name": "dpdk", "list_id": "dev.dpdk.org", "list_email": "dev@dpdk.org", "web_url": "http://core.dpdk.org", "scm_url": "git://dpdk.org/dpdk", "webscm_url": "http://git.dpdk.org/dpdk", "list_archive_url": "https://inbox.dpdk.org/dev", "list_archive_url_format": "https://inbox.dpdk.org/dev/{}", "commit_url_format": "" }, "msgid": "<20231003104854.1381-4-anoobj@marvell.com>", "list_archive_url": "https://inbox.dpdk.org/dev/20231003104854.1381-4-anoobj@marvell.com", "date": "2023-10-03T10:48:52", "name": "[v2,3/5] security: support extra padding with TLS", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": true, "hash": "5b6a5741c4a9e54cd6f48a4b6d36df76f8ffd38c", "submitter": { "id": 1205, "url": "http://patches.dpdk.org/api/people/1205/?format=api", "name": "Anoob Joseph", "email": "anoobj@marvell.com" }, "delegate": { "id": 6690, "url": "http://patches.dpdk.org/api/users/6690/?format=api", "username": "akhil", "first_name": "akhil", "last_name": "goyal", "email": "gakhil@marvell.com" }, "mbox": "http://patches.dpdk.org/project/dpdk/patch/20231003104854.1381-4-anoobj@marvell.com/mbox/", "series": [ { "id": 29720, "url": "http://patches.dpdk.org/api/series/29720/?format=api", "web_url": "http://patches.dpdk.org/project/dpdk/list/?series=29720", "date": "2023-10-03T10:48:49", "name": "add TLS record processing security offload", "version": 2, "mbox": "http://patches.dpdk.org/series/29720/mbox/" } ], "comments": "http://patches.dpdk.org/api/patches/132278/comments/", "check": "success", "checks": "http://patches.dpdk.org/api/patches/132278/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<dev-bounces@dpdk.org>", "X-Original-To": "patchwork@inbox.dpdk.org", "Delivered-To": "patchwork@inbox.dpdk.org", "Received": [ "from mails.dpdk.org (mails.dpdk.org [217.70.189.124])\n\tby inbox.dpdk.org (Postfix) with ESMTP id 81AB5426AE;\n\tTue, 3 Oct 2023 12:49:17 +0200 (CEST)", "from mails.dpdk.org (localhost [127.0.0.1])\n\tby mails.dpdk.org (Postfix) with ESMTP id 769CF40695;\n\tTue, 3 Oct 2023 12:49:10 +0200 (CEST)", "from mx0b-0016f401.pphosted.com (mx0a-0016f401.pphosted.com\n [67.231.148.174])\n by mails.dpdk.org (Postfix) with ESMTP id A517640693\n for <dev@dpdk.org>; Tue, 3 Oct 2023 12:49:08 +0200 (CEST)", "from pps.filterd (m0045849.ppops.net [127.0.0.1])\n by mx0a-0016f401.pphosted.com (8.17.1.19/8.17.1.19) with ESMTP id\n 3933ikxU022252; Tue, 3 Oct 2023 03:49:04 -0700", "from dc5-exch02.marvell.com ([199.233.59.182])\n by mx0a-0016f401.pphosted.com (PPS) with ESMTPS id 3tgbas98w1-1\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT);\n Tue, 03 Oct 2023 03:49:04 -0700", "from DC5-EXCH02.marvell.com (10.69.176.39) by DC5-EXCH02.marvell.com\n (10.69.176.39) with Microsoft SMTP Server (TLS) id 15.0.1497.48;\n Tue, 3 Oct 2023 03:49:02 -0700", "from maili.marvell.com (10.69.176.80) by DC5-EXCH02.marvell.com\n (10.69.176.39) with Microsoft SMTP Server id 15.0.1497.48 via Frontend\n Transport; Tue, 3 Oct 2023 03:49:02 -0700", "from BG-LT92004.corp.innovium.com (unknown [10.28.163.189])\n by maili.marvell.com (Postfix) with ESMTP id B3A933F7043;\n Tue, 3 Oct 2023 03:48:57 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.com;\n h=from : to : cc :\n subject : date : message-id : in-reply-to : references : mime-version :\n content-transfer-encoding : content-type; s=pfpt0220;\n bh=sVvTxRIk1I3suIFsiEOnSlSCKVRAcW96FtcmnAJzPqM=;\n b=Jxpdo8yQLzw1aTFOFnTY1Fz5gY0lAQNfGsFvObvVk+e3nA4nf+7gfOHtM7gxaFLp19yJ\n dL+wDbtfvS5MSohLge9yTD3JQAY4k2eTBD7d1yi/k7aZcIAxyKxOBC2aFLHbJ9XPlOqx\n uqHlcu8jOWsMMO4XX4anpN93xM1ynkSYLsewL9pEVeFgA1lLyD1eGj/SqOrFOkjyk4Wi\n T7syFbkoonlDlIJYpb6szJeZc762w2HM08o26o6QW3xYRkN6WXU9AEIUMoFf3RqsmxIU\n 4jB8IQv6aJqo5U74boH1mgVz4sxFC6Z5hI8jWpZF289YLUaUXXZWYC8tTWNRViB9A2WK +w==", "From": "Anoob Joseph <anoobj@marvell.com>", "To": "Thomas Monjalon <thomas@monjalon.net>, Akhil Goyal <gakhil@marvell.com>,\n Jerin Jacob <jerinj@marvell.com>, Harry van Haaren\n <harry.van.haaren@intel.com>", "CC": "Konstantin Ananyev <konstantin.v.ananyev@yandex.ru>, Hemant Agrawal\n <hemant.agrawal@nxp.com>, <dev@dpdk.org>, Olivier Matz\n <olivier.matz@6wind.com>, Vidya Sagar Velumuri <vvelumuri@marvell.com>", "Subject": "[PATCH v2 3/5] security: support extra padding with TLS", "Date": "Tue, 3 Oct 2023 16:18:52 +0530", "Message-ID": "<20231003104854.1381-4-anoobj@marvell.com>", "X-Mailer": "git-send-email 2.25.1", "In-Reply-To": "<20231003104854.1381-1-anoobj@marvell.com>", "References": "<20230811071712.240-1-anoobj@marvell.com>\n <20231003104854.1381-1-anoobj@marvell.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "Content-Type": "text/plain", "X-Proofpoint-ORIG-GUID": "NXBGUl7rcvRnL7PYg6eiCu8i2UlDZy4Q", "X-Proofpoint-GUID": "NXBGUl7rcvRnL7PYg6eiCu8i2UlDZy4Q", "X-Proofpoint-Virus-Version": "vendor=baseguard\n engine=ICAP:2.0.267,Aquarius:18.0.980,Hydra:6.0.619,FMLib:17.11.176.26\n definitions=2023-10-03_07,2023-10-02_01,2023-05-22_02", "X-BeenThere": "dev@dpdk.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "DPDK patches and discussions <dev.dpdk.org>", "List-Unsubscribe": "<https://mails.dpdk.org/options/dev>,\n <mailto:dev-request@dpdk.org?subject=unsubscribe>", "List-Archive": "<http://mails.dpdk.org/archives/dev/>", "List-Post": "<mailto:dev@dpdk.org>", "List-Help": "<mailto:dev-request@dpdk.org?subject=help>", "List-Subscribe": "<https://mails.dpdk.org/listinfo/dev>,\n <mailto:dev-request@dpdk.org?subject=subscribe>", "Errors-To": "dev-bounces@dpdk.org" }, "content": "In TLS record write protocol (encrypt), application may request for\nextra padding in addition to the default padding which ensures that\ncrypto payload is aligned to block size. This is required to hide\nthe size of the traffic from an observer.\n\nExtend the usage of ``rte_crypto_op.aux_flags`` to allow users to\nprovide extra padding in units of 8B. It is an optional feature and any\ndevice that supports the same can declare so by making use of\ncorresponding capability.\n\nSigned-off-by: Anoob Joseph <anoobj@marvell.com>\nSigned-off-by: Vidya Sagar Velumuri <vvelumuri@marvell.com>\n---\n lib/cryptodev/rte_crypto.h | 14 +++++++++++++-\n lib/security/rte_security.h | 16 ++++++++++++++++\n 2 files changed, 29 insertions(+), 1 deletion(-)", "diff": "diff --git a/lib/cryptodev/rte_crypto.h b/lib/cryptodev/rte_crypto.h\nindex 9b8d0331a4..7b8f2bdc6d 100644\n--- a/lib/cryptodev/rte_crypto.h\n+++ b/lib/cryptodev/rte_crypto.h\n@@ -99,8 +99,20 @@ struct rte_crypto_op {\n \t\t\t/**< operation session type */\n \t\t\tuint8_t aux_flags;\n \t\t\t/**< Operation specific auxiliary/additional flags.\n-\t\t\t * These flags carry additional information from the\n+\t\t\t * These flags carry additional information from/to the\n \t\t\t * operation. Processing of the same is optional.\n+\t\t\t *\n+\t\t\t * The flags are defined as RTE_CRYPTO_OP_AUX_FLAGS_* and would be set by\n+\t\t\t * PMD for application consumption when the status is\n+\t\t\t * RTE_CRYPTO_OP_STATUS_SUCCESS. In case of errors, the value of this\n+\t\t\t * field is undefined.\n+\t\t\t *\n+\t\t\t * With TLS record offload (RTE_SECURITY_PROTOCOL_TLS_RECORD),\n+\t\t\t * application may provide the extra padding required for the plaintext\n+\t\t\t * provided. This field can be used for passing the same in units of 8B. The\n+\t\t\t * value would be set by application for PMD consumption.\n+\t\t\t *\n+\t\t\t * @see struct rte_security_tls_record_sess_options\n \t\t\t */\n \t\t\tuint8_t reserved[2];\n \t\t\t/**< Reserved bytes to fill 64 bits for\ndiff --git a/lib/security/rte_security.h b/lib/security/rte_security.h\nindex 54c32c1147..89e61e10ad 100644\n--- a/lib/security/rte_security.h\n+++ b/lib/security/rte_security.h\n@@ -636,6 +636,22 @@ struct rte_security_tls_record_sess_options {\n \t * and application is not required to provide IV.\n \t */\n \tuint32_t iv_gen_disable : 1;\n+\t/** Enable extra padding\n+\t *\n+\t * TLS allows user to pad the plain text to hide the actual size of the record. This is\n+\t * required to achieve traffic flow confidentiality in case of TLS/DTLS flows. This padding\n+\t * is in addition to the default padding performed by PMD (which ensures ciphertext is\n+\t * aligned to block size).\n+\t *\n+\t * On supported devices, application may pass the required additional padding via\n+\t * ``rte_crypto_op.aux_flags`` field.\n+\t *\n+\t * 1 : Enable extra padding of the plain text provided. The extra padding value would be\n+\t * read from ``rte_crypto_op.aux_flags``.\n+\t *\n+\t * 0 : Disable extra padding\n+\t */\n+\tuint32_t extra_padding_enable : 1;\n };\n \n /**\n", "prefixes": [ "v2", "3/5" ] }