Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/62267/?format=api
{ "id": 62267, "url": "https://patches.dpdk.org/api/patches/62267/?format=api", "web_url": "https://patches.dpdk.org/project/dpdk/patch/20191031045458.29166-1-hemant.agrawal@nxp.com/", "project": { "id": 1, "url": "https://patches.dpdk.org/api/projects/1/?format=api", "name": "DPDK", "link_name": "dpdk", "list_id": "dev.dpdk.org", "list_email": "dev@dpdk.org", "web_url": "http://core.dpdk.org", "scm_url": "git://dpdk.org/dpdk", "webscm_url": "http://git.dpdk.org/dpdk", "list_archive_url": "https://inbox.dpdk.org/dev", "list_archive_url_format": "https://inbox.dpdk.org/dev/{}", "commit_url_format": "" }, "msgid": "<20191031045458.29166-1-hemant.agrawal@nxp.com>", "list_archive_url": "https://inbox.dpdk.org/dev/20191031045458.29166-1-hemant.agrawal@nxp.com", "date": "2019-10-31T04:54:56", "name": "[v4,1/3] security: add anti replay window size", "commit_ref": null, "pull_url": null, "state": "superseded", "archived": true, "hash": "c7fa0998d75adde0fe7c63e437ed1b75f07c1e7d", "submitter": { "id": 477, "url": "https://patches.dpdk.org/api/people/477/?format=api", "name": "Hemant Agrawal", "email": "hemant.agrawal@nxp.com" }, "delegate": { "id": 6690, "url": "https://patches.dpdk.org/api/users/6690/?format=api", "username": "akhil", "first_name": "akhil", "last_name": "goyal", "email": "gakhil@marvell.com" }, "mbox": "https://patches.dpdk.org/project/dpdk/patch/20191031045458.29166-1-hemant.agrawal@nxp.com/mbox/", "series": [ { "id": 7171, "url": "https://patches.dpdk.org/api/series/7171/?format=api", "web_url": "https://patches.dpdk.org/project/dpdk/list/?series=7171", "date": "2019-10-31T04:54:56", "name": "[v4,1/3] security: add anti replay window size", "version": 4, "mbox": "https://patches.dpdk.org/series/7171/mbox/" } ], "comments": "https://patches.dpdk.org/api/patches/62267/comments/", "check": "success", "checks": "https://patches.dpdk.org/api/patches/62267/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<dev-bounces@dpdk.org>", "X-Original-To": "patchwork@inbox.dpdk.org", "Delivered-To": "patchwork@inbox.dpdk.org", "Received": [ "from dpdk.org (dpdk.org [92.243.14.124])\n\tby inbox.dpdk.org (Postfix) with ESMTP id EC4A8A00BE;\n\tThu, 31 Oct 2019 05:58:03 +0100 (CET)", "from [92.243.14.124] (localhost [127.0.0.1])\n\tby dpdk.org (Postfix) with ESMTP id B6E0D1C19C;\n\tThu, 31 Oct 2019 05:58:02 +0100 (CET)", "from inva020.nxp.com (inva020.nxp.com [92.121.34.13])\n by dpdk.org (Postfix) with ESMTP id CDCE41BFE4\n for <dev@dpdk.org>; Thu, 31 Oct 2019 05:58:01 +0100 (CET)", "from inva020.nxp.com (localhost [127.0.0.1])\n by inva020.eu-rdc02.nxp.com (Postfix) with ESMTP id 37EC21A04CB;\n Thu, 31 Oct 2019 05:58:01 +0100 (CET)", "from invc005.ap-rdc01.nxp.com (invc005.ap-rdc01.nxp.com\n [165.114.16.14])\n by inva020.eu-rdc02.nxp.com (Postfix) with ESMTP id 0A03A1A02EF;\n Thu, 31 Oct 2019 05:57:59 +0100 (CET)", "from bf-netperf1.ap.freescale.net (bf-netperf1.ap.freescale.net\n [10.232.133.63])\n by invc005.ap-rdc01.nxp.com (Postfix) with ESMTP id 290F8402E2;\n Thu, 31 Oct 2019 12:57:56 +0800 (SGT)" ], "From": "Hemant Agrawal <hemant.agrawal@nxp.com>", "To": "dev@dpdk.org,\n\takhil.goyal@nxp.com", "Cc": "konstantin.ananyev@intel.com,\n\tHemant Agrawal <hemant.agrawal@nxp.com>", "Date": "Thu, 31 Oct 2019 10:24:56 +0530", "Message-Id": "<20191031045458.29166-1-hemant.agrawal@nxp.com>", "X-Mailer": "git-send-email 2.17.1", "In-Reply-To": "<20191030085701.13815-1-hemant.agrawal@nxp.com>", "References": "<20191030085701.13815-1-hemant.agrawal@nxp.com>", "X-Virus-Scanned": "ClamAV using ClamSMTP", "Subject": "[dpdk-dev] [PATCH v4 1/3] security: add anti replay window size", "X-BeenThere": "dev@dpdk.org", "X-Mailman-Version": "2.1.15", "Precedence": "list", "List-Id": "DPDK patches and discussions <dev.dpdk.org>", "List-Unsubscribe": "<https://mails.dpdk.org/options/dev>,\n <mailto:dev-request@dpdk.org?subject=unsubscribe>", "List-Archive": "<http://mails.dpdk.org/archives/dev/>", "List-Post": "<mailto:dev@dpdk.org>", "List-Help": "<mailto:dev-request@dpdk.org?subject=help>", "List-Subscribe": "<https://mails.dpdk.org/listinfo/dev>,\n <mailto:dev-request@dpdk.org?subject=subscribe>", "Errors-To": "dev-bounces@dpdk.org", "Sender": "\"dev\" <dev-bounces@dpdk.org>" }, "content": "At present the ipsec xfrom is missing the important step\nto configure the anti replay window size.\nThe newly added field will also help in to enable or disable\nthe anti replay checking, if available in offload by means\nof non-zero or zero value.\n\nSigned-off-by: Hemant Agrawal <hemant.agrawal@nxp.com>\n---\n doc/guides/rel_notes/release_19_11.rst | 6 +++++-\n lib/librte_security/Makefile | 2 +-\n lib/librte_security/meson.build | 2 +-\n lib/librte_security/rte_security.h | 4 ++++\n 4 files changed, 11 insertions(+), 3 deletions(-)", "diff": "diff --git a/doc/guides/rel_notes/release_19_11.rst b/doc/guides/rel_notes/release_19_11.rst\nindex ae8e7b2f0..0508ec545 100644\n--- a/doc/guides/rel_notes/release_19_11.rst\n+++ b/doc/guides/rel_notes/release_19_11.rst\n@@ -365,6 +365,10 @@ ABI Changes\n align the Ethernet header on receive and all known encapsulations\n preserve the alignment of the header.\n \n+* security: A new field ''replay_win_sz'' has been added to the structure\n+ ``rte_security_ipsec_xform``, which specify the Anti replay window size\n+ to enable sequence replay attack handling.\n+\n \n Shared Library Versions\n -----------------------\n@@ -437,7 +441,7 @@ The libraries prepended with a plus sign were incremented in this version.\n librte_reorder.so.1\n librte_ring.so.2\n + librte_sched.so.4\n- librte_security.so.2\n+ + librte_security.so.3\n librte_stack.so.1\n librte_table.so.3\n librte_timer.so.1\ndiff --git a/lib/librte_security/Makefile b/lib/librte_security/Makefile\nindex 6708effdb..6a268ee2a 100644\n--- a/lib/librte_security/Makefile\n+++ b/lib/librte_security/Makefile\n@@ -7,7 +7,7 @@ include $(RTE_SDK)/mk/rte.vars.mk\n LIB = librte_security.a\n \n # library version\n-LIBABIVER := 2\n+LIBABIVER := 3\n \n # build flags\n CFLAGS += -O3\ndiff --git a/lib/librte_security/meson.build b/lib/librte_security/meson.build\nindex a5130d2f6..6fed01273 100644\n--- a/lib/librte_security/meson.build\n+++ b/lib/librte_security/meson.build\n@@ -1,7 +1,7 @@\n # SPDX-License-Identifier: BSD-3-Clause\n # Copyright(c) 2017-2019 Intel Corporation\n \n-version = 2\n+version = 3\n sources = files('rte_security.c')\n headers = files('rte_security.h', 'rte_security_driver.h')\n deps += ['mempool', 'cryptodev']\ndiff --git a/lib/librte_security/rte_security.h b/lib/librte_security/rte_security.h\nindex aaafdfcd7..195ad5645 100644\n--- a/lib/librte_security/rte_security.h\n+++ b/lib/librte_security/rte_security.h\n@@ -212,6 +212,10 @@ struct rte_security_ipsec_xform {\n \t/**< Tunnel parameters, NULL for transport mode */\n \tuint64_t esn_soft_limit;\n \t/**< ESN for which the overflow event need to be raised */\n+\tuint32_t replay_win_sz;\n+\t/**< Anti replay window size to enable sequence replay attack handling.\n+\t * replay checking is disabled if the window size is 0.\n+\t */\n };\n \n /**\n", "prefixes": [ "v4", "1/3" ] }