mbox series

[v3,0/8] Add lookaside IPsec and asymmetric in cnxk crypto PMDs

Message ID 1624952076-30928-1-git-send-email-anoobj@marvell.com (mailing list archive)
Headers
Series Add lookaside IPsec and asymmetric in cnxk crypto PMDs |

Message

Anoob Joseph June 29, 2021, 7:34 a.m. UTC 
  Add rte_security (lookaside protocol - IPsec) support in crypto_cn10k.

IPsec operations can be offloaded to CPT's SE and IE engines, which
can process IPsec protcol operations including atomic sequence number
increment (for outbound operations) and anti replay window check (for
inbound operations).

Add support for asymmetric operations in crypto cnxk PMDs.
Following operations are supported,
- RSA
- DSA
- ECDSA
- ECPM
- Modular Exponentation

Anoob Joseph (2):
  crypto/cnxk: add security capabilities
  crypto/cnxk: add asymmetric capabilities

Kiran Kumar K (3):
  crypto/cnxk: add asymmetric session ops
  crypto/cnxk: add asymmetric datapath ops
  test/crypto: add cnxk for asymmetric cases

Srujana Challa (1):
  crypto/cnxk: add security ctx skeleton

Tejasree Kondoj (2):
  crypto/cnxk: add security session ops
  crypto/cnxk: add security handling in datapath ops

Changes in v3:
- Rebased on dpdk-next-crypto ToT
- Merged asymmetric & lookaside IPsec series

  Changes in v2:
- Added documentation
- Added asymmetric capabilities as separate patch


 app/test/test_cryptodev_asym.c                    |  30 +
 doc/guides/cryptodevs/cnxk.rst                    |  47 ++
 doc/guides/cryptodevs/features/cn10k.ini          |  14 +
 doc/guides/cryptodevs/features/cn9k.ini           |  13 +
 doc/guides/rel_notes/release_21_08.rst            |   4 +
 drivers/crypto/cnxk/cn10k_cryptodev.c             |  14 +
 drivers/crypto/cnxk/cn10k_cryptodev_ops.c         | 111 ++-
 drivers/crypto/cnxk/cn10k_ipsec.c                 | 275 +++++++
 drivers/crypto/cnxk/cn10k_ipsec.h                 |  36 +
 drivers/crypto/cnxk/cn10k_ipsec_la_ops.h          |  74 ++
 drivers/crypto/cnxk/cn9k_cryptodev.c              |   4 +-
 drivers/crypto/cnxk/cn9k_cryptodev_ops.c          |  35 +-
 drivers/crypto/cnxk/cnxk_ae.h                     | 836 ++++++++++++++++++++++
 drivers/crypto/cnxk/cnxk_cryptodev.h              |   8 +-
 drivers/crypto/cnxk/cnxk_cryptodev_capabilities.c | 170 +++++
 drivers/crypto/cnxk/cnxk_cryptodev_capabilities.h |   9 +-
 drivers/crypto/cnxk/cnxk_cryptodev_ops.c          | 106 +++
 drivers/crypto/cnxk/cnxk_cryptodev_ops.h          |   8 +
 drivers/crypto/cnxk/cnxk_cryptodev_sec.c          |  48 ++
 drivers/crypto/cnxk/cnxk_cryptodev_sec.h          |  14 +
 drivers/crypto/cnxk/cnxk_ipsec.h                  |  20 +
 drivers/crypto/cnxk/meson.build                   |   6 +-
 22 files changed, 1869 insertions(+), 13 deletions(-)
 create mode 100644 drivers/crypto/cnxk/cn10k_ipsec.c
 create mode 100644 drivers/crypto/cnxk/cn10k_ipsec.h
 create mode 100644 drivers/crypto/cnxk/cn10k_ipsec_la_ops.h
 create mode 100644 drivers/crypto/cnxk/cnxk_ae.h
 create mode 100644 drivers/crypto/cnxk/cnxk_cryptodev_sec.c
 create mode 100644 drivers/crypto/cnxk/cnxk_cryptodev_sec.h
 create mode 100644 drivers/crypto/cnxk/cnxk_ipsec.h

Comments

Akhil Goyal June 29, 2021, 7:52 p.m. UTC | #1 
> 
> Add rte_security (lookaside protocol - IPsec) support in crypto_cn10k.
> 
> IPsec operations can be offloaded to CPT's SE and IE engines, which
> can process IPsec protcol operations including atomic sequence number
> increment (for outbound operations) and anti replay window check (for
> inbound operations).
> 
> Add support for asymmetric operations in crypto cnxk PMDs.
> Following operations are supported,
> - RSA
> - DSA
> - ECDSA
> - ECPM
> - Modular Exponentation
> 

Series Acked-by: Akhil Goyal <gakhil@marvell.com>

Applied to dpdk-next-crypto

Release notes and patch title/description updated while merging.