From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0083.outbound.protection.outlook.com [104.47.38.83]) by dpdk.org (Postfix) with ESMTP id 614D6558D for ; Fri, 13 Jan 2017 08:57:18 +0100 (CET) Received: from BN6PR03CA0029.namprd03.prod.outlook.com (10.175.124.15) by MWHPR03MB2477.namprd03.prod.outlook.com (10.169.200.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.845.12; Fri, 13 Jan 2017 07:57:16 +0000 Received: from BL2FFO11FD014.protection.gbl (2a01:111:f400:7c09::188) by BN6PR03CA0029.outlook.office365.com (2603:10b6:404:10c::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.845.12 via Frontend Transport; Fri, 13 Jan 2017 07:57:16 +0000 Authentication-Results: spf=fail (sender IP is 192.88.168.50) smtp.mailfrom=nxp.com; caviumnetworks.com; dkim=none (message not signed) header.d=none;caviumnetworks.com; dmarc=fail action=none header.from=nxp.com;caviumnetworks.com; dkim=none (message not signed) header.d=none; Received-SPF: Fail (protection.outlook.com: domain of nxp.com does not designate 192.88.168.50 as permitted sender) receiver=protection.outlook.com; client-ip=192.88.168.50; helo=tx30smr01.am.freescale.net; Received: from tx30smr01.am.freescale.net (192.88.168.50) by BL2FFO11FD014.mail.protection.outlook.com (10.173.160.222) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_RSA_WITH_AES_256_CBC_SHA) id 15.1.803.8 via Frontend Transport; Fri, 13 Jan 2017 07:57:15 +0000 Received: from [127.0.0.1] ([10.232.133.65]) by tx30smr01.am.freescale.net (8.14.3/8.14.0) with ESMTP id v0D7v8WD022390; Fri, 13 Jan 2017 00:57:12 -0700 References: <1481077985-4224-2-git-send-email-zbigniew.bodek@caviumnetworks.com> <1483551207-18236-1-git-send-email-zbigniew.bodek@caviumnetworks.com> <1483551207-18236-4-git-send-email-zbigniew.bodek@caviumnetworks.com> From: Hemant Agrawal To: CC: , , Jerin Jacob Message-ID: <08761663-35b6-85de-3c55-c4cc52537986@nxp.com> Date: Fri, 13 Jan 2017 13:27:07 +0530 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 In-Reply-To: <1483551207-18236-4-git-send-email-zbigniew.bodek@caviumnetworks.com> Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 7bit X-EOPAttributedMessage: 0 X-Matching-Connectors: 131287678354885209; (91ab9b29-cfa4-454e-5278-08d120cd25b8); () X-Forefront-Antispam-Report: CIP:192.88.168.50; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10009020)(6009001)(7916002)(336005)(39400400002)(39850400002)(39380400002)(39860400002)(39410400002)(39450400003)(39840400002)(2980300002)(1110001)(1109001)(339900001)(199003)(377454003)(189002)(24454002)(106466001)(2351001)(36756003)(104016004)(229853002)(81166006)(8936002)(8676002)(81156014)(2906002)(50986999)(31686004)(53946003)(5660300001)(76176999)(54906002)(54356999)(4326007)(626004)(120886001)(86362001)(68736007)(305945005)(7246003)(77096006)(6306002)(65806001)(97736004)(23746002)(2950100002)(47776003)(105606002)(65956001)(189998001)(4001350100001)(230700001)(356003)(65826007)(7126002)(92566002)(6666003)(6916009)(64126003)(83506001)(50466002)(31696002)(85426001)(110136003)(33646002)(38730400001)(579004)(559001); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR03MB2477; H:tx30smr01.am.freescale.net; FPR:; SPF:Fail; PTR:InfoDomainNonexistent; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BL2FFO11FD014; 1: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 X-MS-Office365-Filtering-Correlation-Id: a940a340-c37f-48b4-28fd-08d43b89ca2f X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:MWHPR03MB2477; X-Microsoft-Exchange-Diagnostics: 1; MWHPR03MB2477; 3:hcNHfvnRiw43sUJUndfEoO6fIp1A2gGZwqbxs4Dear7BBWpDXZCDFKwZEj7ZGpYMFCoc+Dybr8suBoIrQ7H3lHpzc1awvEQxI3Q3OyEab/xol9nv/SWi319t96u34UWUetj28GOTAxJvrlmu4pJn+8yrEUcXzY6h5KJdlTrir/BYhhAFYrYY9a0S56niEQc5gVSgtnSt4zvmIwhtMvC14tcKAwlO9DvZORsCk6Tz/FzCkYk2E51flqaN8Sh4F5qv2xHlq9kc0J616UD8c9WbayT58EbjhIIfmyJCz2sVp3fI2qS4DlrQgIj2mRqHhcfkiEW1IZBMCDZP+Fz4V1s8AJG/xdDiuuegSMIgpUieimIhhnxjr40d2yIHeOUDfioL X-Microsoft-Exchange-Diagnostics: 1; MWHPR03MB2477; 25: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 X-Microsoft-Exchange-Diagnostics: 1; MWHPR03MB2477; 31:4M1v+n/2FOnLKSxDfmAEgpa2JRRdNAeUBTG157/z/IccsLECfMwaoD4hl120WBOH5GgGw/cPOANy/JWvLMPpbei/UqUI15Y8YugmEt2/XOeSPA0Rj1R0ey5jBrc9aD6e/ChqLL0HPe4Vf4B/2Q8InsYvniYNb5ldBK8qq2kosswvqnQxm8n4DiQXTII5u//b2G1LCn9ORBrybewPGazEJtzSL9BiwFsK99V95brVACDOLuC4IEMWMgyUH7gR3+8taQ7F6nbGavIe8AF1by3BLQ== X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:(166708455590820)(131327999870524)(788757137089); X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6095060)(601004)(2401047)(5005006)(8121501046)(13023025)(13017025)(13015025)(13018025)(13024025)(10201501046)(3002001)(6055026)(6096035)(20161123565025)(20161123563025)(20161123556025)(20161123561025)(20161123559025); SRVR:MWHPR03MB2477; BCL:0; PCL:0; RULEID:(400006); SRVR:MWHPR03MB2477; X-Microsoft-Exchange-Diagnostics: 1; MWHPR03MB2477; 4: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 X-Forefront-PRVS: 018632C080 X-Microsoft-Exchange-Diagnostics: =?Windows-1252?Q?1; MWHPR03MB2477; 23:c76cB2ypTBhs8UKk96Tysc3RSScCgCgmsERSi?= =?Windows-1252?Q?rji0qr2ajH4RxhQighYhjAsM+6hf128EymUXDwYieEz+R4nXNyZUAMWm?= =?Windows-1252?Q?Q1UO0dhuU/kNiRjPUpGLSBZ6fvG9tYXy1vkD62SvRe80LvKzMhH/TKQK?= =?Windows-1252?Q?IujpXjDMh7hqZQuJJX5VbLhTO/Ps9H3YYwQnwFYR0dmw5GzR7mFKORls?= =?Windows-1252?Q?HwIJ1Rp++qzkqVpOQfO5bWNZ8aU8EK++iLgzACBIaAze5Xyb75uQsifq?= =?Windows-1252?Q?TQ7uVageN33XuTG7o3KBDyffSPEDP80L/veSsPxIvmFNe7/w0ojICA7I?= =?Windows-1252?Q?iF6IswvB/0WH8TuXuGqWya49DiERoLu6x4fMAs6ttKdq08ZkjvG0/+0j?= =?Windows-1252?Q?AtJMOMoUIH3iZst3cdJ5J9KoDQ2AWap8Uh719vQPCDllJPkknb0lX9uQ?= =?Windows-1252?Q?bQH4BbwU84CAQjmt8L1DsFOdYWftoaVh8FRUKNpGzYZT9PS1uKRaysr8?= =?Windows-1252?Q?ttYUpSlzp2JmjPUggD/TKBkT2ZftrfmOtpdxdwIat02WTGQ1pnzurq0i?= =?Windows-1252?Q?hFK4C+RlsQpb22W36dEGYbtUOn1OKDbcG6WGXStqjYrTN42LnOEIUdvi?= =?Windows-1252?Q?x4ER7sHcTEH4LN5rEarNgTJ06A7p9ojgumDMUbnOJzNS1Gf5lx1gzuko?= =?Windows-1252?Q?riCZCP65flK9M2ArKY6QEsw+FmOcOkZPbQS/N+bLsMpy1Urv7kz6PClQ?= =?Windows-1252?Q?j0h5GY/E7Sl8nt8O//u+R74pXdBIKFLsEbH1GL4pyDl2NuMLDfgJIu+k?= =?Windows-1252?Q?k830hUZPyDLvISnMhRdWaXphoRT4u0IydbGhfnm0VMgLiLgEnBBUmj9y?= =?Windows-1252?Q?UISBvpK7Sonqp3XiTPd9bCdgoccwQzB5YgpRZQ21gk8SHwq2WSmK909A?= =?Windows-1252?Q?khu0UdPiAXlCjWgsuTTzpxFGyH/G215jMUUcKPxtp7tiahS5HHBdFz1L?= =?Windows-1252?Q?ttjfP4htMC2H6yIf4CTpr7aCuka9plJficLV5/jS7uORfR6LugA9TER/?= =?Windows-1252?Q?12SYl518kZcSSNlr8KeRSD5M4d5I8EOYydcD4k0E2dSm6+n3NORck0Vc?= =?Windows-1252?Q?ogcNeb3EROfvo2lOMdAhQ8dl9dVIE9ZoVvIjWMWXa7+6UwsrVhGt13tt?= =?Windows-1252?Q?pMXjC+TxG8MPLqquzBd78cnBrHfhMirb6GfFwRdH7aaqMNV+p4miBFl5?= =?Windows-1252?Q?oN0IdbbWi08BpDHFHnuJmwj/hO8XOHBa88Ir5yU8BneoOVSZVkjvL4/e?= =?Windows-1252?Q?a+5UYlcbS5bIDhKTGtsIGBLgi9lJ1i/Si5ayb4TXpWL8WQEXqd53aENY?= =?Windows-1252?Q?JigRDVEf62wLxJMzavYV7Bw/pmLLOuOnCN9SquAoeTd8PblEf0Q9YLoy?= =?Windows-1252?Q?lMX+jSii+WcGW7KB271jfMwyBUBjxdkZIgb8Luo55E+365zr8uPeU339?= =?Windows-1252?Q?G+Iq2+MNSnXs5zaJrgPtnEwwh91BXWf5183Be4OExJ+OhSzIG32pFF+M?= =?Windows-1252?Q?HsdWG1X+joonTu8myEiRjr4BVQauxM7JzLA1B3av1lmb4Qy/Zwnrj9Yh?= =?Windows-1252?Q?Cp9oKY5jKKtuybeaRtyLlAaKKE8qRDv4td0251ABlZXsNldeC/dlQ1e0?= =?Windows-1252?Q?lbD1HP0paTObZjOwTaKbzLtBEW7peHpgvRe12mtVt1hdzNE4x/PLFl4W?= =?Windows-1252?Q?UPdeaqPbjZMjYBxWh+ODSgUsKKz+7kQiabCdJE=3D?= X-Microsoft-Exchange-Diagnostics: 1; MWHPR03MB2477; 6:HOJ1NDgOMQwpsdg/Le36Us5k1Di2JRntnVFpZKlkvhqCLxVpIuOa6fxpe/vn24FCW2I3DGQcFJF4bIBa93eCSdqXh/uYFo2zIEKPX793iQKsUHMGPboVjdNqyQ51eLv2aSQDWfU0P9Dcv1v7ujo8kSFXuOnnzVmGuwYWgzx3CTiJwCW5e7KpNtXzopXNAVnoIyalfBlHsjiLGNtwyX51qF3pEK8HOZnZgxQRXC5gxZPiq1cfjrxRjfg4xniuKigw/Zrx7Vhdinv3JlHhoQqZpDJcdY1CLQsErrdE7y6ZiwwuTHPTmg80o10VGkxvfxbwE5UrIUxQW/ora1NAXasEXzG9AhNbPdKcjJr9ToFZU9JHfjfQzfCwHCKh0m1SjI4Bs0ps6GymIcgOk0ffsWTTVgnL2kl5yx+UEWywOBoNQMqplLaF8H29wNHgzZXP7E5U; 5:HHGG5mK8o96uWSbuHNn8iBf3SAkGXuxpjQzZ1hz+a14l1hu3uui2vCjpr01Sh2sPj9VU5VOfeNkP8WPOLUIqF58ydghx0i21/v4jD3EfpgFUVWhwq7VV0R85QYTrc2oJRNFMtx1TdmttOUX8vo7HpfiaQOnjxxvEikDsgSWPQUTHJ2YTOkVzEsDN2MOFlqyq; 24:Mz6cz458ebDINu68M83CKCS1LFpAQi2jYjn3G7g0EdirNejFssHZLeggCYc94nHimnAMczLwovV6O9D5Fik2JDUKs9MKSxfs+PGRIx32Oa0= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; MWHPR03MB2477; 7:XmS6+JKph9/G3dc9OMJlCJiCWWQH1Zx8zTR6MndpD5GYPA0HEyq42Q5SVv8eUmiZwK4GGMyJYC6QW4SliHKuEw8SBHciLNsiYJYNNEoiaaHdQP+oBdxV3QGtLKs65uIdT5UXZtPtXCy872HgxxjfKEEExrwXIR2ykR6tJiQ6ep5RiK9Km2Pm7GcrxFKOBhZxhebDNRfTDqEkrJU+7Es2chM/jWGtSEL1SMZcr3dToBWGYYmnaEw0PlfV2shYlku2lmick3eZEi7Rx3oQ7ctxmTIV1k4hubP3iL5TTp9vErYSSI2e0N08G9mHu2IiYgIMtcqSgkAt5wwpkCjRAbMFSetBbhWYGCibpyfPaOlE1o0DA2bgW3kBQ3loK42RGipzTgyfwsVW55uNBt802pnqPwkB4gZwZseHvBA4bqAmqpTYq95Qb1Mz1qSCKsQh0DRfrhk0qAA2hKBWu7qP+2GA3w== X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jan 2017 07:57:15.2389 (UTC) X-MS-Exchange-CrossTenant-Id: 5afe0b00-7697-4969-b663-5eab37d5f47e X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5afe0b00-7697-4969-b663-5eab37d5f47e; Ip=[192.88.168.50]; Helo=[tx30smr01.am.freescale.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR03MB2477 Subject: Re: [dpdk-dev] [PATCH v3 3/8] crypto/armv8: add PMD optimized for ARMv8 processors X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jan 2017 07:57:19 -0000 On 1/4/2017 11:03 PM, zbigniew.bodek@caviumnetworks.com wrote: > From: Zbigniew Bodek > > This patch introduces crypto poll mode driver > using ARMv8 cryptographic extensions. > CPU compatibility with this driver is detected in > run-time and virtual crypto device will not be > created if CPU doesn't provide: > AES, SHA1, SHA2 and NEON. > > This PMD is optimized to provide performance boost > for chained crypto operations processing, > such as encryption + HMAC generation, > decryption + HMAC validation. In particular, > cipher only or hash only operations are > not provided. > > The driver currently supports AES-128-CBC > in combination with: SHA256 HMAC and SHA1 HMAC > and relies on the external armv8_crypto library: > https://github.com/caviumnetworks/armv8_crypto > > This patch adds driver's code only and does > not include it in the build system. > > Signed-off-by: Zbigniew Bodek > --- > drivers/crypto/armv8/Makefile | 73 ++ > drivers/crypto/armv8/rte_armv8_pmd.c | 926 +++++++++++++++++++++++++ > drivers/crypto/armv8/rte_armv8_pmd_ops.c | 369 ++++++++++ > drivers/crypto/armv8/rte_armv8_pmd_private.h | 211 ++++++ > drivers/crypto/armv8/rte_armv8_pmd_version.map | 3 + > 5 files changed, 1582 insertions(+) > create mode 100644 drivers/crypto/armv8/Makefile > create mode 100644 drivers/crypto/armv8/rte_armv8_pmd.c > create mode 100644 drivers/crypto/armv8/rte_armv8_pmd_ops.c > create mode 100644 drivers/crypto/armv8/rte_armv8_pmd_private.h > create mode 100644 drivers/crypto/armv8/rte_armv8_pmd_version.map > > diff --git a/drivers/crypto/armv8/Makefile b/drivers/crypto/armv8/Makefile > new file mode 100644 > index 0000000..dc5ea02 > --- /dev/null > +++ b/drivers/crypto/armv8/Makefile > @@ -0,0 +1,73 @@ > +# > +# BSD LICENSE > +# > +# Copyright (C) Cavium networks Ltd. 2017. > +# > +# Redistribution and use in source and binary forms, with or without > +# modification, are permitted provided that the following conditions > +# are met: > +# > +# * Redistributions of source code must retain the above copyright > +# notice, this list of conditions and the following disclaimer. > +# * Redistributions in binary form must reproduce the above copyright > +# notice, this list of conditions and the following disclaimer in > +# the documentation and/or other materials provided with the > +# distribution. > +# * Neither the name of Cavium networks nor the names of its > +# contributors may be used to endorse or promote products derived > +# from this software without specific prior written permission. > +# > +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS > +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT > +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR > +# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT > +# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, > +# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT > +# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, > +# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY > +# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT > +# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE > +# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. > +# > + > +include $(RTE_SDK)/mk/rte.vars.mk > + > +ifneq ($(MAKECMDGOALS),clean) > +ifneq ($(MAKECMDGOALS),config) > +ifeq ($(ARMV8_CRYPTO_LIB_PATH),) > +$(error "Please define ARMV8_CRYPTO_LIB_PATH environment variable") > +endif > +endif > +endif > + > +# library name > +LIB = librte_pmd_armv8.a > + > +# build flags > +CFLAGS += -O3 > +CFLAGS += $(WERROR_FLAGS) > +CFLAGS += -L$(RTE_SDK)/../openssl -I$(RTE_SDK)/../openssl/include > + > +# library version > +LIBABIVER := 1 > + > +# versioning export map > +EXPORT_MAP := rte_armv8_pmd_version.map > + > +# external library dependencies > +CFLAGS += -I$(ARMV8_CRYPTO_LIB_PATH) > +CFLAGS += -I$(ARMV8_CRYPTO_LIB_PATH)/asm/include > +LDLIBS += -L$(ARMV8_CRYPTO_LIB_PATH) -larmv8_crypto > + > +# library source files > +SRCS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += rte_armv8_pmd.c > +SRCS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += rte_armv8_pmd_ops.c > + > +# library dependencies > +DEPDIRS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += lib/librte_eal > +DEPDIRS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += lib/librte_mbuf > +DEPDIRS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += lib/librte_mempool > +DEPDIRS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += lib/librte_ring > +DEPDIRS-$(CONFIG_RTE_LIBRTE_PMD_ARMV8_CRYPTO) += lib/librte_cryptodev > + > +include $(RTE_SDK)/mk/rte.lib.mk > diff --git a/drivers/crypto/armv8/rte_armv8_pmd.c b/drivers/crypto/armv8/rte_armv8_pmd.c > new file mode 100644 > index 0000000..39433bb > --- /dev/null > +++ b/drivers/crypto/armv8/rte_armv8_pmd.c > @@ -0,0 +1,926 @@ > +/* > + * BSD LICENSE > + * > + * Copyright (C) Cavium networks Ltd. 2017. > + * > + * Redistribution and use in source and binary forms, with or without > + * modification, are permitted provided that the following conditions > + * are met: > + * > + * * Redistributions of source code must retain the above copyright > + * notice, this list of conditions and the following disclaimer. > + * * Redistributions in binary form must reproduce the above copyright > + * notice, this list of conditions and the following disclaimer in > + * the documentation and/or other materials provided with the > + * distribution. > + * * Neither the name of Cavium networks nor the names of its > + * contributors may be used to endorse or promote products derived > + * from this software without specific prior written permission. > + * > + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS > + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT > + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR > + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT > + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, > + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT > + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, > + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY > + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT > + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE > + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. > + */ > + > +#include > + > +#include > +#include > +#include > +#include > +#include > +#include > +#include > + > +#include "armv8_crypto_defs.h" > + > +#include "rte_armv8_pmd_private.h" > + > +static int cryptodev_armv8_crypto_uninit(const char *name); > + > +/** > + * Pointers to the supported combined mode crypto functions are stored > + * in the static tables. Each combined (chained) cryptographic operation > + * can be decribed by a set of numbers: replace "decribed" with "described" > + * - order: order of operations (cipher, auth) or (auth, cipher) > + * - direction: encryption or decryption > + * - calg: cipher algorithm such as AES_CBC, AES_CTR, etc. > + * - aalg: authentication algorithm such as SHA1, SHA256, etc. > + * - keyl: cipher key length, for example 128, 192, 256 bits > + * > + * In order to quickly acquire each function pointer based on those numbers, > + * a hierarchy of arrays is maintained. The final level, 3D array is indexed > + * by the combined mode function parameters only (cipher algorithm, > + * authentication algorithm and key length). > + * > + * This gives 3 memory accesses to obtain a function pointer instead of > + * traversing the array manually and comparing function parameters on each loop. > + * > + * +--+CRYPTO_FUNC > + * +--+ENC| > + * +--+CA| > + * | +--+DEC > + * ORDER| > + * | +--+ENC > + * +--+AC| > + * +--+DEC > + * > + */ > + > +/** > + * 3D array type for ARM Combined Mode crypto functions pointers. > + * CRYPTO_CIPHER_MAX: max cipher ID number > + * CRYPTO_AUTH_MAX: max auth ID number > + * CRYPTO_CIPHER_KEYLEN_MAX: max key length ID number > + */ > +typedef const crypto_func_t > +crypto_func_tbl_t[CRYPTO_CIPHER_MAX][CRYPTO_AUTH_MAX][CRYPTO_CIPHER_KEYLEN_MAX]; > + > +/* Evaluate to key length definition */ > +#define KEYL(keyl) (ARMV8_CRYPTO_CIPHER_KEYLEN_ ## keyl) > + > +/* Local aliases for supported ciphers */ > +#define CIPH_AES_CBC RTE_CRYPTO_CIPHER_AES_CBC > +/* Local aliases for supported hashes */ > +#define AUTH_SHA1_HMAC RTE_CRYPTO_AUTH_SHA1_HMAC > +#define AUTH_SHA256 RTE_CRYPTO_AUTH_SHA256 SHA256 you are defining both AUTH and HMAC, however for SHA1 only HMAC. In your implementation, you seems to be only supporting HMAC. > +#define AUTH_SHA256_HMAC RTE_CRYPTO_AUTH_SHA256_HMAC > + > +/** > + * Arrays containing pointers to particular cryptographic, > + * combined mode functions. > + * crypto_op_ca_encrypt: cipher (encrypt), authenticate > + * crypto_op_ca_decrypt: cipher (decrypt), authenticate > + * crypto_op_ac_encrypt: authenticate, cipher (encrypt) > + * crypto_op_ac_decrypt: authenticate, cipher (decrypt) > + */ > +static const crypto_func_tbl_t > +crypto_op_ca_encrypt = { > + /* [cipher alg][auth alg][key length] = crypto_function, */ > + [CIPH_AES_CBC][AUTH_SHA1_HMAC][KEYL(128)] = aes128cbc_sha1_hmac, > + [CIPH_AES_CBC][AUTH_SHA256_HMAC][KEYL(128)] = aes128cbc_sha256_hmac, > +}; > + do you plan to support aes192 and aes256 as well? > +static const crypto_func_tbl_t > +crypto_op_ca_decrypt = { > + NULL > +}; > + > +static const crypto_func_tbl_t > +crypto_op_ac_encrypt = { > + NULL > +}; > + > +static const crypto_func_tbl_t > +crypto_op_ac_decrypt = { > + /* [cipher alg][auth alg][key length] = crypto_function, */ > + [CIPH_AES_CBC][AUTH_SHA1_HMAC][KEYL(128)] = sha1_hmac_aes128cbc_dec, > + [CIPH_AES_CBC][AUTH_SHA256_HMAC][KEYL(128)] = sha256_hmac_aes128cbc_dec, > +}; > + > +/** > + * Arrays containing pointers to particular cryptographic function sets, > + * covering given cipher operation directions (encrypt, decrypt) > + * for each order of cipher and authentication pairs. > + */ > +static const crypto_func_tbl_t * > +crypto_cipher_auth[] = { > + &crypto_op_ca_encrypt, > + &crypto_op_ca_decrypt, > + NULL > +}; > + > +static const crypto_func_tbl_t * > +crypto_auth_cipher[] = { > + &crypto_op_ac_encrypt, > + &crypto_op_ac_decrypt, > + NULL > +}; > + > +/** > + * Top level array containing pointers to particular cryptographic > + * function sets, covering given order of chained operations. > + * crypto_cipher_auth: cipher first, authenticate after > + * crypto_auth_cipher: authenticate first, cipher after > + */ > +static const crypto_func_tbl_t ** > +crypto_chain_order[] = { > + crypto_cipher_auth, > + crypto_auth_cipher, > + NULL > +}; > + > +/** > + * Extract particular combined mode crypto function from the 3D array. > + */ > +#define CRYPTO_GET_ALGO(order, cop, calg, aalg, keyl) \ > +({ \ > + crypto_func_tbl_t *func_tbl = \ > + (crypto_chain_order[(order)])[(cop)]; \ > + \ > + ((*func_tbl)[(calg)][(aalg)][KEYL(keyl)]); \ > +}) > + > +/*----------------------------------------------------------------------------*/ > + > +/** > + * 2D array type for ARM key schedule functions pointers. > + * CRYPTO_CIPHER_MAX: max cipher ID number > + * CRYPTO_CIPHER_KEYLEN_MAX: max key length ID number > + */ > +typedef const crypto_key_sched_t > +crypto_key_sched_tbl_t[CRYPTO_CIPHER_MAX][CRYPTO_CIPHER_KEYLEN_MAX]; > + > +static const crypto_key_sched_tbl_t > +crypto_key_sched_encrypt = { > + /* [cipher alg][key length] = key_expand_func, */ > + [CIPH_AES_CBC][KEYL(128)] = aes128_key_sched_enc, > +}; > + > +static const crypto_key_sched_tbl_t > +crypto_key_sched_decrypt = { > + /* [cipher alg][key length] = key_expand_func, */ > + [CIPH_AES_CBC][KEYL(128)] = aes128_key_sched_dec, > +}; > + > +/** > + * Top level array containing pointers to particular key generation > + * function sets, covering given operation direction. > + * crypto_key_sched_encrypt: keys for encryption > + * crypto_key_sched_decrypt: keys for decryption > + */ > +static const crypto_key_sched_tbl_t * > +crypto_key_sched_dir[] = { > + &crypto_key_sched_encrypt, > + &crypto_key_sched_decrypt, > + NULL > +}; > + > +/** > + * Extract particular combined mode crypto function from the 3D array. > + */ > +#define CRYPTO_GET_KEY_SCHED(cop, calg, keyl) \ > +({ \ > + crypto_key_sched_tbl_t *ks_tbl = crypto_key_sched_dir[(cop)]; \ > + \ > + ((*ks_tbl)[(calg)][KEYL(keyl)]); \ > +}) > + > +/*----------------------------------------------------------------------------*/ > + > +/** > + * Global static parameter used to create a unique name for each > + * ARMV8 crypto device. > + */ > +static unsigned int unique_name_id; > + > +static inline int > +create_unique_device_name(char *name, size_t size) > +{ > + int ret; > + > + if (name == NULL) > + return -EINVAL; > + > + ret = snprintf(name, size, "%s_%u", RTE_STR(CRYPTODEV_NAME_ARMV8_PMD), > + unique_name_id++); > + if (ret < 0) > + return ret; > + return 0; > +} > + > +/* > + *------------------------------------------------------------------------------ > + * Session Prepare > + *------------------------------------------------------------------------------ > + */ > + > +/** Get xform chain order */ > +static enum armv8_crypto_chain_order > +armv8_crypto_get_chain_order(const struct rte_crypto_sym_xform *xform) > +{ > + > + /* > + * This driver currently covers only chained operations. > + * Ignore only cipher or only authentication operations > + * or chains longer than 2 xform structures. > + */ > + if (xform->next == NULL || xform->next->next != NULL) > + return ARMV8_CRYPTO_CHAIN_NOT_SUPPORTED; > + > + if (xform->type == RTE_CRYPTO_SYM_XFORM_AUTH) { > + if (xform->next->type == RTE_CRYPTO_SYM_XFORM_CIPHER) > + return ARMV8_CRYPTO_CHAIN_AUTH_CIPHER; > + } > + > + if (xform->type == RTE_CRYPTO_SYM_XFORM_CIPHER) { > + if (xform->next->type == RTE_CRYPTO_SYM_XFORM_AUTH) > + return ARMV8_CRYPTO_CHAIN_CIPHER_AUTH; > + } > + > + return ARMV8_CRYPTO_CHAIN_NOT_SUPPORTED; > +} > + > +static inline void > +auth_hmac_pad_prepare(struct armv8_crypto_session *sess, > + const struct rte_crypto_sym_xform *xform) > +{ > + size_t i; > + > + /* Generate i_key_pad and o_key_pad */ > + memset(sess->auth.hmac.i_key_pad, 0, sizeof(sess->auth.hmac.i_key_pad)); > + rte_memcpy(sess->auth.hmac.i_key_pad, sess->auth.hmac.key, > + xform->auth.key.length); > + memset(sess->auth.hmac.o_key_pad, 0, sizeof(sess->auth.hmac.o_key_pad)); > + rte_memcpy(sess->auth.hmac.o_key_pad, sess->auth.hmac.key, > + xform->auth.key.length); > + /* > + * XOR key with IPAD/OPAD values to obtain i_key_pad > + * and o_key_pad. > + * Byte-by-byte operation may seem to be the less efficient > + * here but in fact it's the opposite. > + * The result ASM code is likely operate on NEON registers > + * (load auth key to Qx, load IPAD/OPAD to multiple > + * elements of Qy, eor 128 bits at once). > + */ > + for (i = 0; i < SHA_BLOCK_MAX; i++) { > + sess->auth.hmac.i_key_pad[i] ^= HMAC_IPAD_VALUE; > + sess->auth.hmac.o_key_pad[i] ^= HMAC_OPAD_VALUE; > + } > +} > + > +static inline int > +auth_set_prerequisites(struct armv8_crypto_session *sess, > + const struct rte_crypto_sym_xform *xform) > +{ > + uint8_t partial[64] = { 0 }; > + int error; > + > + switch (xform->auth.algo) { > + case RTE_CRYPTO_AUTH_SHA1_HMAC: > + /* > + * Generate authentication key, i_key_pad and o_key_pad. > + */ > + /* Zero memory under key */ > + memset(sess->auth.hmac.key, 0, SHA1_AUTH_KEY_LENGTH); > + > + if (xform->auth.key.length > SHA1_AUTH_KEY_LENGTH) { > + /* > + * In case the key is longer than 160 bits > + * the algorithm will use SHA1(key) instead. > + */ > + error = sha1_block(NULL, xform->auth.key.data, > + sess->auth.hmac.key, xform->auth.key.length); > + if (error != 0) > + return -1; > + } else { > + /* > + * Now copy the given authentication key to the session > + * key assuming that the session key is zeroed there is > + * no need for additional zero padding if the key is > + * shorter than SHA1_AUTH_KEY_LENGTH. > + */ > + rte_memcpy(sess->auth.hmac.key, xform->auth.key.data, > + xform->auth.key.length); > + } > + > + /* Prepare HMAC padding: key|pattern */ > + auth_hmac_pad_prepare(sess, xform); > + /* > + * Calculate partial hash values for i_key_pad and o_key_pad. > + * Will be used as initialization state for final HMAC. > + */ > + error = sha1_block_partial(NULL, sess->auth.hmac.i_key_pad, > + partial, SHA1_BLOCK_SIZE); > + if (error != 0) > + return -1; > + memcpy(sess->auth.hmac.i_key_pad, partial, SHA1_BLOCK_SIZE); > + > + error = sha1_block_partial(NULL, sess->auth.hmac.o_key_pad, > + partial, SHA1_BLOCK_SIZE); > + if (error != 0) > + return -1; > + memcpy(sess->auth.hmac.o_key_pad, partial, SHA1_BLOCK_SIZE); > + > + break; > + case RTE_CRYPTO_AUTH_SHA256_HMAC: > + /* > + * Generate authentication key, i_key_pad and o_key_pad. > + */ > + /* Zero memory under key */ > + memset(sess->auth.hmac.key, 0, SHA256_AUTH_KEY_LENGTH); > + > + if (xform->auth.key.length > SHA256_AUTH_KEY_LENGTH) { > + /* > + * In case the key is longer than 256 bits > + * the algorithm will use SHA256(key) instead. > + */ > + error = sha256_block(NULL, xform->auth.key.data, > + sess->auth.hmac.key, xform->auth.key.length); > + if (error != 0) > + return -1; > + } else { > + /* > + * Now copy the given authentication key to the session > + * key assuming that the session key is zeroed there is > + * no need for additional zero padding if the key is > + * shorter than SHA256_AUTH_KEY_LENGTH. > + */ > + rte_memcpy(sess->auth.hmac.key, xform->auth.key.data, > + xform->auth.key.length); > + } > + > + /* Prepare HMAC padding: key|pattern */ > + auth_hmac_pad_prepare(sess, xform); > + /* > + * Calculate partial hash values for i_key_pad and o_key_pad. > + * Will be used as initialization state for final HMAC. > + */ > + error = sha256_block_partial(NULL, sess->auth.hmac.i_key_pad, > + partial, SHA256_BLOCK_SIZE); > + if (error != 0) > + return -1; > + memcpy(sess->auth.hmac.i_key_pad, partial, SHA256_BLOCK_SIZE); > + > + error = sha256_block_partial(NULL, sess->auth.hmac.o_key_pad, > + partial, SHA256_BLOCK_SIZE); > + if (error != 0) > + return -1; > + memcpy(sess->auth.hmac.o_key_pad, partial, SHA256_BLOCK_SIZE); > + > + break; > + default: > + break; > + } > + > + return 0; > +} > + > +static inline int > +cipher_set_prerequisites(struct armv8_crypto_session *sess, > + const struct rte_crypto_sym_xform *xform) > +{ > + crypto_key_sched_t cipher_key_sched; > + > + cipher_key_sched = sess->cipher.key_sched; > + if (likely(cipher_key_sched != NULL)) { > + /* Set up cipher session key */ > + cipher_key_sched(sess->cipher.key.data, xform->cipher.key.data); > + } > + > + return 0; > +} > + > +static int > +armv8_crypto_set_session_chained_parameters(struct armv8_crypto_session *sess, > + const struct rte_crypto_sym_xform *cipher_xform, > + const struct rte_crypto_sym_xform *auth_xform) > +{ > + enum armv8_crypto_chain_order order; > + enum armv8_crypto_cipher_operation cop; > + enum rte_crypto_cipher_algorithm calg; > + enum rte_crypto_auth_algorithm aalg; > + > + /* Validate and prepare scratch order of combined operations */ > + switch (sess->chain_order) { > + case ARMV8_CRYPTO_CHAIN_CIPHER_AUTH: > + case ARMV8_CRYPTO_CHAIN_AUTH_CIPHER: > + order = sess->chain_order; > + break; > + default: > + return -EINVAL; > + } > + /* Select cipher direction */ > + sess->cipher.direction = cipher_xform->cipher.op; > + /* Select cipher key */ > + sess->cipher.key.length = cipher_xform->cipher.key.length; > + /* Set cipher direction */ > + cop = sess->cipher.direction; > + /* Set cipher algorithm */ > + calg = cipher_xform->cipher.algo; > + > + /* Select cipher algo */ > + switch (calg) { > + /* Cover supported cipher algorithms */ > + case RTE_CRYPTO_CIPHER_AES_CBC: > + sess->cipher.algo = calg; > + /* IV len is always 16 bytes (block size) for AES CBC */ > + sess->cipher.iv_len = 16; > + break; > + default: > + return -EINVAL; > + } > + /* Select auth generate/verify */ > + sess->auth.operation = auth_xform->auth.op; > + > + /* Select auth algo */ > + switch (auth_xform->auth.algo) { > + /* Cover supported hash algorithms */ > + case RTE_CRYPTO_AUTH_SHA256: > + aalg = auth_xform->auth.algo; > + sess->auth.mode = ARMV8_CRYPTO_AUTH_AS_AUTH; > + break; as previously stated, are you supporting AUTH types? > + case RTE_CRYPTO_AUTH_SHA1_HMAC: > + case RTE_CRYPTO_AUTH_SHA256_HMAC: /* Fall through */ > + aalg = auth_xform->auth.algo; > + sess->auth.mode = ARMV8_CRYPTO_AUTH_AS_HMAC; > + break; > + default: > + return -EINVAL; > + } > + > + /* Verify supported key lengths and extract proper algorithm */ > + switch (cipher_xform->cipher.key.length << 3) { > + case 128: > + sess->crypto_func = > + CRYPTO_GET_ALGO(order, cop, calg, aalg, 128); > + sess->cipher.key_sched = > + CRYPTO_GET_KEY_SCHED(cop, calg, 128); > + break; > + case 192: aes192 and aes256? > + sess->crypto_func = > + CRYPTO_GET_ALGO(order, cop, calg, aalg, 192); > + sess->cipher.key_sched = > + CRYPTO_GET_KEY_SCHED(cop, calg, 192); > + break; > + case 256: > + sess->crypto_func = > + CRYPTO_GET_ALGO(order, cop, calg, aalg, 256); > + sess->cipher.key_sched = > + CRYPTO_GET_KEY_SCHED(cop, calg, 256); > + break; > + default: > + sess->crypto_func = NULL; > + sess->cipher.key_sched = NULL; > + return -EINVAL; > + } > + > + if (unlikely(sess->crypto_func == NULL)) { > + /* > + * If we got here that means that there must be a bug > + * in the algorithms selection above. Nevertheless keep > + * it here to catch bug immediately and avoid NULL pointer > + * dereference in OPs processing. > + */ > + ARMV8_CRYPTO_LOG_ERR( > + "No appropriate crypto function for given parameters"); > + return -EINVAL; > + } > + > + /* Set up cipher session prerequisites */ > + if (cipher_set_prerequisites(sess, cipher_xform) != 0) > + return -EINVAL; > + > + /* Set up authentication session prerequisites */ > + if (auth_set_prerequisites(sess, auth_xform) != 0) > + return -EINVAL; > + > + return 0; > +} > + > +/** Parse crypto xform chain and set private session parameters */ > +int > +armv8_crypto_set_session_parameters(struct armv8_crypto_session *sess, > + const struct rte_crypto_sym_xform *xform) > +{ > + const struct rte_crypto_sym_xform *cipher_xform = NULL; > + const struct rte_crypto_sym_xform *auth_xform = NULL; > + bool is_chained_op; > + int ret; > + > + /* Filter out spurious/broken requests */ > + if (xform == NULL) > + return -EINVAL; > + > + sess->chain_order = armv8_crypto_get_chain_order(xform); > + switch (sess->chain_order) { > + case ARMV8_CRYPTO_CHAIN_CIPHER_AUTH: > + cipher_xform = xform; > + auth_xform = xform->next; > + is_chained_op = true; > + break; > + case ARMV8_CRYPTO_CHAIN_AUTH_CIPHER: > + auth_xform = xform; > + cipher_xform = xform->next; > + is_chained_op = true; > + break; > + default: > + is_chained_op = false; > + return -EINVAL; > + } > + > + if (is_chained_op) { > + ret = armv8_crypto_set_session_chained_parameters(sess, > + cipher_xform, auth_xform); > + if (unlikely(ret != 0)) { > + ARMV8_CRYPTO_LOG_ERR( > + "Invalid/unsupported chained (cipher/auth) parameters"); > + return -EINVAL; > + } > + } else { > + ARMV8_CRYPTO_LOG_ERR("Invalid/unsupported operation"); > + return -EINVAL; > + } > + > + return 0; > +} > + > +/** Provide session for operation */ > +static struct armv8_crypto_session * > +get_session(struct armv8_crypto_qp *qp, struct rte_crypto_op *op) > +{ > + struct armv8_crypto_session *sess = NULL; > + > + if (op->sym->sess_type == RTE_CRYPTO_SYM_OP_WITH_SESSION) { > + /* get existing session */ > + if (likely(op->sym->session != NULL && > + op->sym->session->dev_type == > + RTE_CRYPTODEV_ARMV8_PMD)) { > + sess = (struct armv8_crypto_session *) > + op->sym->session->_private; > + } > + } else { > + /* provide internal session */ > + void *_sess = NULL; > + > + if (!rte_mempool_get(qp->sess_mp, (void **)&_sess)) { > + sess = (struct armv8_crypto_session *) > + ((struct rte_cryptodev_sym_session *)_sess) > + ->_private; > + > + if (unlikely(armv8_crypto_set_session_parameters( > + sess, op->sym->xform) != 0)) { > + rte_mempool_put(qp->sess_mp, _sess); > + sess = NULL; > + } else > + op->sym->session = _sess; > + } > + } > + > + if (sess == NULL) > + op->status = RTE_CRYPTO_OP_STATUS_INVALID_SESSION; > + > + return sess; > +} > + > +/* > + *------------------------------------------------------------------------------ > + * Process Operations > + *------------------------------------------------------------------------------ > + */ > + > +/*----------------------------------------------------------------------------*/ > + > +/** Process cipher operation */ > +static void > +process_armv8_chained_op > + (struct rte_crypto_op *op, struct armv8_crypto_session *sess, > + struct rte_mbuf *mbuf_src, struct rte_mbuf *mbuf_dst) > +{ > + crypto_func_t crypto_func; > + crypto_arg_t arg; > + struct rte_mbuf *m_asrc, *m_adst; > + uint8_t *csrc, *cdst; > + uint8_t *adst, *asrc; > + uint64_t clen, alen __rte_unused; > + int error; > + > + clen = op->sym->cipher.data.length; > + alen = op->sym->auth.data.length; > + > + csrc = rte_pktmbuf_mtod_offset(mbuf_src, uint8_t *, > + op->sym->cipher.data.offset); > + cdst = rte_pktmbuf_mtod_offset(mbuf_dst, uint8_t *, > + op->sym->cipher.data.offset); > + > + switch (sess->chain_order) { > + case ARMV8_CRYPTO_CHAIN_CIPHER_AUTH: > + m_asrc = m_adst = mbuf_dst; > + break; > + case ARMV8_CRYPTO_CHAIN_AUTH_CIPHER: > + m_asrc = mbuf_src; > + m_adst = mbuf_dst; > + break; > + default: > + op->status = RTE_CRYPTO_OP_STATUS_INVALID_ARGS; > + return; > + } > + asrc = rte_pktmbuf_mtod_offset(m_asrc, uint8_t *, > + op->sym->auth.data.offset); > + > + switch (sess->auth.mode) { > + case ARMV8_CRYPTO_AUTH_AS_AUTH: > + /* Nothing to do here, just verify correct option */ > + break; > + case ARMV8_CRYPTO_AUTH_AS_HMAC: > + arg.digest.hmac.key = sess->auth.hmac.key; > + arg.digest.hmac.i_key_pad = sess->auth.hmac.i_key_pad; > + arg.digest.hmac.o_key_pad = sess->auth.hmac.o_key_pad; > + break; > + default: > + op->status = RTE_CRYPTO_OP_STATUS_INVALID_ARGS; > + return; > + } > + > + if (sess->auth.operation == RTE_CRYPTO_AUTH_OP_GENERATE) { > + adst = op->sym->auth.digest.data; > + if (adst == NULL) { > + adst = rte_pktmbuf_mtod_offset(m_adst, > + uint8_t *, > + op->sym->auth.data.offset + > + op->sym->auth.data.length); > + } > + } else { > + adst = (uint8_t *)rte_pktmbuf_append(m_asrc, > + op->sym->auth.digest.length); > + } > + > + if (unlikely(op->sym->cipher.iv.length != sess->cipher.iv_len)) { > + op->status = RTE_CRYPTO_OP_STATUS_INVALID_ARGS; > + return; > + } > + > + arg.cipher.iv = op->sym->cipher.iv.data; > + arg.cipher.key = sess->cipher.key.data; > + /* Acquire combined mode function */ > + crypto_func = sess->crypto_func; > + ARMV8_CRYPTO_ASSERT(crypto_func != NULL); > + error = crypto_func(csrc, cdst, clen, asrc, adst, alen, &arg); > + if (error != 0) { > + op->status = RTE_CRYPTO_OP_STATUS_INVALID_ARGS; > + return; > + } > + > + op->status = RTE_CRYPTO_OP_STATUS_SUCCESS; > + if (sess->auth.operation == RTE_CRYPTO_AUTH_OP_VERIFY) { > + if (memcmp(adst, op->sym->auth.digest.data, > + op->sym->auth.digest.length) != 0) { > + op->status = RTE_CRYPTO_OP_STATUS_AUTH_FAILED; > + } > + /* Trim area used for digest from mbuf. */ > + rte_pktmbuf_trim(m_asrc, > + op->sym->auth.digest.length); > + } > +} > + > +/** Process crypto operation for mbuf */ > +static int > +process_op(const struct armv8_crypto_qp *qp, struct rte_crypto_op *op, > + struct armv8_crypto_session *sess) > +{ > + struct rte_mbuf *msrc, *mdst; > + int retval; > + > + msrc = op->sym->m_src; > + mdst = op->sym->m_dst ? op->sym->m_dst : op->sym->m_src; > + > + op->status = RTE_CRYPTO_OP_STATUS_NOT_PROCESSED; > + > + switch (sess->chain_order) { > + case ARMV8_CRYPTO_CHAIN_CIPHER_AUTH: > + case ARMV8_CRYPTO_CHAIN_AUTH_CIPHER: /* Fall through */ > + process_armv8_chained_op(op, sess, msrc, mdst); > + break; > + default: > + op->status = RTE_CRYPTO_OP_STATUS_ERROR; > + break; > + } > + > + /* Free session if a session-less crypto op */ > + if (op->sym->sess_type == RTE_CRYPTO_SYM_OP_SESSIONLESS) { > + memset(sess, 0, sizeof(struct armv8_crypto_session)); > + rte_mempool_put(qp->sess_mp, op->sym->session); > + op->sym->session = NULL; > + } > + > + if (op->status == RTE_CRYPTO_OP_STATUS_NOT_PROCESSED) > + op->status = RTE_CRYPTO_OP_STATUS_SUCCESS; > + > + if (op->status != RTE_CRYPTO_OP_STATUS_ERROR) > + retval = rte_ring_enqueue(qp->processed_ops, (void *)op); > + else > + retval = -1; > + > + return retval; > +} > + > +/* > + *------------------------------------------------------------------------------ > + * PMD Framework > + *------------------------------------------------------------------------------ > + */ > + > +/** Enqueue burst */ > +static uint16_t > +armv8_crypto_pmd_enqueue_burst(void *queue_pair, struct rte_crypto_op **ops, > + uint16_t nb_ops) > +{ > + struct armv8_crypto_session *sess; > + struct armv8_crypto_qp *qp = queue_pair; > + int i, retval; > + > + for (i = 0; i < nb_ops; i++) { > + sess = get_session(qp, ops[i]); > + if (unlikely(sess == NULL)) > + goto enqueue_err; > + > + retval = process_op(qp, ops[i], sess); > + if (unlikely(retval < 0)) > + goto enqueue_err; > + } > + > + qp->stats.enqueued_count += i; > + return i; > + > +enqueue_err: > + if (ops[i] != NULL) > + ops[i]->status = RTE_CRYPTO_OP_STATUS_INVALID_ARGS; > + > + qp->stats.enqueue_err_count++; > + return i; > +} > + > +/** Dequeue burst */ > +static uint16_t > +armv8_crypto_pmd_dequeue_burst(void *queue_pair, struct rte_crypto_op **ops, > + uint16_t nb_ops) > +{ > + struct armv8_crypto_qp *qp = queue_pair; > + > + unsigned int nb_dequeued = 0; > + > + nb_dequeued = rte_ring_dequeue_burst(qp->processed_ops, > + (void **)ops, nb_ops); > + qp->stats.dequeued_count += nb_dequeued; > + > + return nb_dequeued; > +} > + > +/** Create ARMv8 crypto device */ > +static int > +cryptodev_armv8_crypto_create(const char *name, > + struct rte_crypto_vdev_init_params *init_params) > +{ > + struct rte_cryptodev *dev; > + char crypto_dev_name[RTE_CRYPTODEV_NAME_MAX_LEN]; > + struct armv8_crypto_private *internals; > + > + /* Check CPU for support for AES instruction set */ > + if (!rte_cpu_get_flag_enabled(RTE_CPUFLAG_AES)) { > + ARMV8_CRYPTO_LOG_ERR( > + "AES instructions not supported by CPU"); > + return -EFAULT; > + } > + > + /* Check CPU for support for SHA instruction set */ > + if (!rte_cpu_get_flag_enabled(RTE_CPUFLAG_SHA1) || > + !rte_cpu_get_flag_enabled(RTE_CPUFLAG_SHA2)) { > + ARMV8_CRYPTO_LOG_ERR( > + "SHA1/SHA2 instructions not supported by CPU"); > + return -EFAULT; > + } > + > + /* Check CPU for support for Advance SIMD instruction set */ > + if (!rte_cpu_get_flag_enabled(RTE_CPUFLAG_NEON)) { > + ARMV8_CRYPTO_LOG_ERR( > + "Advanced SIMD instructions not supported by CPU"); > + return -EFAULT; > + } > + > + /* create a unique device name */ > + if (create_unique_device_name(crypto_dev_name, > + RTE_CRYPTODEV_NAME_MAX_LEN) != 0) { > + ARMV8_CRYPTO_LOG_ERR("failed to create unique cryptodev name"); > + return -EINVAL; > + } > + > + dev = rte_cryptodev_pmd_virtual_dev_init(crypto_dev_name, > + sizeof(struct armv8_crypto_private), > + init_params->socket_id); > + if (dev == NULL) { > + ARMV8_CRYPTO_LOG_ERR("failed to create cryptodev vdev"); > + goto init_error; > + } > + > + dev->dev_type = RTE_CRYPTODEV_ARMV8_PMD; > + dev->dev_ops = rte_armv8_crypto_pmd_ops; > + > + /* register rx/tx burst functions for data path */ > + dev->dequeue_burst = armv8_crypto_pmd_dequeue_burst; > + dev->enqueue_burst = armv8_crypto_pmd_enqueue_burst; > + > + dev->feature_flags = RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO | > + RTE_CRYPTODEV_FF_SYM_OPERATION_CHAINING; > + > + /* Set vector instructions mode supported */ > + internals = dev->data->dev_private; > + > + internals->max_nb_qpairs = init_params->max_nb_queue_pairs; > + internals->max_nb_sessions = init_params->max_nb_sessions; > + > + return 0; > + > +init_error: > + ARMV8_CRYPTO_LOG_ERR( > + "driver %s: cryptodev_armv8_crypto_create failed", name); > + > + cryptodev_armv8_crypto_uninit(crypto_dev_name); > + return -EFAULT; > +} > + > +/** Initialise ARMv8 crypto device */ > +static int > +cryptodev_armv8_crypto_init(const char *name, > + const char *input_args) > +{ > + struct rte_crypto_vdev_init_params init_params = { > + RTE_CRYPTODEV_VDEV_DEFAULT_MAX_NB_QUEUE_PAIRS, > + RTE_CRYPTODEV_VDEV_DEFAULT_MAX_NB_SESSIONS, > + rte_socket_id() > + }; > + > + rte_cryptodev_parse_vdev_init_params(&init_params, input_args); > + > + RTE_LOG(INFO, PMD, "Initialising %s on NUMA node %d\n", name, > + init_params.socket_id); > + RTE_LOG(INFO, PMD, " Max number of queue pairs = %d\n", > + init_params.max_nb_queue_pairs); > + RTE_LOG(INFO, PMD, " Max number of sessions = %d\n", > + init_params.max_nb_sessions); > + > + return cryptodev_armv8_crypto_create(name, &init_params); > +} > + > +/** Uninitialise ARMv8 crypto device */ > +static int > +cryptodev_armv8_crypto_uninit(const char *name) > +{ > + if (name == NULL) > + return -EINVAL; > + > + RTE_LOG(INFO, PMD, > + "Closing ARMv8 crypto device %s on numa socket %u\n", > + name, rte_socket_id()); > + > + return 0; > +} > + > +static struct rte_vdev_driver armv8_crypto_drv = { > + .probe = cryptodev_armv8_crypto_init, > + .remove = cryptodev_armv8_crypto_uninit > +}; > + > +RTE_PMD_REGISTER_VDEV(CRYPTODEV_NAME_ARMV8_PMD, armv8_crypto_drv); > +RTE_PMD_REGISTER_ALIAS(CRYPTODEV_NAME_ARMV8_PMD, cryptodev_armv8_pmd); > +RTE_PMD_REGISTER_PARAM_STRING(CRYPTODEV_NAME_ARMV8_PMD, > + "max_nb_queue_pairs= " > + "max_nb_sessions= " > + "socket_id="); > diff --git a/drivers/crypto/armv8/rte_armv8_pmd_ops.c b/drivers/crypto/armv8/rte_armv8_pmd_ops.c > new file mode 100644 > index 0000000..2bf6475 > --- /dev/null > +++ b/drivers/crypto/armv8/rte_armv8_pmd_ops.c > @@ -0,0 +1,369 @@ > +/* > + * BSD LICENSE > + * > + * Copyright (C) Cavium networks Ltd. 2017. > + * > + * Redistribution and use in source and binary forms, with or without > + * modification, are permitted provided that the following conditions > + * are met: > + * > + * * Redistributions of source code must retain the above copyright > + * notice, this list of conditions and the following disclaimer. > + * * Redistributions in binary form must reproduce the above copyright > + * notice, this list of conditions and the following disclaimer in > + * the documentation and/or other materials provided with the > + * distribution. > + * * Neither the name of Cavium networks nor the names of its > + * contributors may be used to endorse or promote products derived > + * from this software without specific prior written permission. > + * > + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS > + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT > + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR > + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT > + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, > + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT > + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, > + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY > + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT > + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE > + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. > + */ > + > +#include > + > +#include > +#include > +#include > + > +#include "armv8_crypto_defs.h" > + > +#include "rte_armv8_pmd_private.h" > + > +static const struct rte_cryptodev_capabilities > + armv8_crypto_pmd_capabilities[] = { > + { /* SHA1 HMAC */ > + .op = RTE_CRYPTO_OP_TYPE_SYMMETRIC, > + {.sym = { > + .xform_type = RTE_CRYPTO_SYM_XFORM_AUTH, > + {.auth = { > + .algo = RTE_CRYPTO_AUTH_SHA1_HMAC, > + .block_size = 64, > + .key_size = { > + .min = 16, > + .max = 128, > + .increment = 0 > + }, > + .digest_size = { > + .min = 20, > + .max = 20, > + .increment = 0 > + }, > + .aad_size = { 0 } > + }, } > + }, } > + }, > + { /* SHA256 HMAC */ > + .op = RTE_CRYPTO_OP_TYPE_SYMMETRIC, > + {.sym = { > + .xform_type = RTE_CRYPTO_SYM_XFORM_AUTH, > + {.auth = { > + .algo = RTE_CRYPTO_AUTH_SHA256_HMAC, > + .block_size = 64, > + .key_size = { > + .min = 16, > + .max = 128, > + .increment = 0 > + }, > + .digest_size = { > + .min = 32, > + .max = 32, > + .increment = 0 > + }, > + .aad_size = { 0 } > + }, } > + }, } > + }, > + { /* AES CBC */ > + .op = RTE_CRYPTO_OP_TYPE_SYMMETRIC, > + {.sym = { > + .xform_type = RTE_CRYPTO_SYM_XFORM_CIPHER, > + {.cipher = { > + .algo = RTE_CRYPTO_CIPHER_AES_CBC, > + .block_size = 16, > + .key_size = { > + .min = 16, > + .max = 16, do you plan max = 32 ? > + .increment = 0 > + }, > + .iv_size = { > + .min = 16, > + .max = 16, > + .increment = 0 > + } > + }, } > + }, } > + }, > + > + RTE_CRYPTODEV_END_OF_CAPABILITIES_LIST() > +}; > + > + > +/** Configure device */ > +static int > +armv8_crypto_pmd_config(__rte_unused struct rte_cryptodev *dev) > +{ > + return 0; > +} > + > +/** Start device */ > +static int > +armv8_crypto_pmd_start(__rte_unused struct rte_cryptodev *dev) > +{ > + return 0; > +} > + > +/** Stop device */ > +static void > +armv8_crypto_pmd_stop(__rte_unused struct rte_cryptodev *dev) > +{ > +} > + > +/** Close device */ > +static int > +armv8_crypto_pmd_close(__rte_unused struct rte_cryptodev *dev) > +{ > + return 0; > +} > + > + > +/** Get device statistics */ > +static void > +armv8_crypto_pmd_stats_get(struct rte_cryptodev *dev, > + struct rte_cryptodev_stats *stats) > +{ > + int qp_id; > + > + for (qp_id = 0; qp_id < dev->data->nb_queue_pairs; qp_id++) { > + struct armv8_crypto_qp *qp = dev->data->queue_pairs[qp_id]; > + > + stats->enqueued_count += qp->stats.enqueued_count; > + stats->dequeued_count += qp->stats.dequeued_count; > + > + stats->enqueue_err_count += qp->stats.enqueue_err_count; > + stats->dequeue_err_count += qp->stats.dequeue_err_count; > + } > +} > + > +/** Reset device statistics */ > +static void > +armv8_crypto_pmd_stats_reset(struct rte_cryptodev *dev) > +{ > + int qp_id; > + > + for (qp_id = 0; qp_id < dev->data->nb_queue_pairs; qp_id++) { > + struct armv8_crypto_qp *qp = dev->data->queue_pairs[qp_id]; > + > + memset(&qp->stats, 0, sizeof(qp->stats)); > + } > +} > + > + > +/** Get device info */ > +static void > +armv8_crypto_pmd_info_get(struct rte_cryptodev *dev, > + struct rte_cryptodev_info *dev_info) > +{ > + struct armv8_crypto_private *internals = dev->data->dev_private; > + > + if (dev_info != NULL) { > + dev_info->dev_type = dev->dev_type; > + dev_info->feature_flags = dev->feature_flags; > + dev_info->capabilities = armv8_crypto_pmd_capabilities; > + dev_info->max_nb_queue_pairs = internals->max_nb_qpairs; > + dev_info->sym.max_nb_sessions = internals->max_nb_sessions; > + } > +} > + > +/** Release queue pair */ > +static int > +armv8_crypto_pmd_qp_release(struct rte_cryptodev *dev, uint16_t qp_id) > +{ > + > + if (dev->data->queue_pairs[qp_id] != NULL) { > + rte_free(dev->data->queue_pairs[qp_id]); > + dev->data->queue_pairs[qp_id] = NULL; > + } > + > + return 0; > +} > + > +/** set a unique name for the queue pair based on it's name, dev_id and qp_id */ > +static int > +armv8_crypto_pmd_qp_set_unique_name(struct rte_cryptodev *dev, > + struct armv8_crypto_qp *qp) > +{ > + unsigned int n; > + > + n = snprintf(qp->name, sizeof(qp->name), "armv8_crypto_pmd_%u_qp_%u", > + dev->data->dev_id, qp->id); > + > + if (n > sizeof(qp->name)) > + return -1; > + > + return 0; > +} > + > + > +/** Create a ring to place processed operations on */ > +static struct rte_ring * > +armv8_crypto_pmd_qp_create_processed_ops_ring(struct armv8_crypto_qp *qp, > + unsigned int ring_size, int socket_id) > +{ > + struct rte_ring *r; > + > + r = rte_ring_lookup(qp->name); > + if (r) { > + if (r->prod.size >= ring_size) { > + ARMV8_CRYPTO_LOG_INFO( > + "Reusing existing ring %s for processed ops", > + qp->name); > + return r; > + } > + > + ARMV8_CRYPTO_LOG_ERR( > + "Unable to reuse existing ring %s for processed ops", > + qp->name); > + return NULL; > + } > + > + return rte_ring_create(qp->name, ring_size, socket_id, > + RING_F_SP_ENQ | RING_F_SC_DEQ); > +} > + > + > +/** Setup a queue pair */ > +static int > +armv8_crypto_pmd_qp_setup(struct rte_cryptodev *dev, uint16_t qp_id, > + const struct rte_cryptodev_qp_conf *qp_conf, > + int socket_id) > +{ > + struct armv8_crypto_qp *qp = NULL; > + > + /* Free memory prior to re-allocation if needed. */ > + if (dev->data->queue_pairs[qp_id] != NULL) > + armv8_crypto_pmd_qp_release(dev, qp_id); > + > + /* Allocate the queue pair data structure. */ > + qp = rte_zmalloc_socket("ARMv8 PMD Queue Pair", sizeof(*qp), > + RTE_CACHE_LINE_SIZE, socket_id); > + if (qp == NULL) > + return -ENOMEM; > + > + qp->id = qp_id; > + dev->data->queue_pairs[qp_id] = qp; > + > + if (armv8_crypto_pmd_qp_set_unique_name(dev, qp) != 0) > + goto qp_setup_cleanup; > + > + qp->processed_ops = armv8_crypto_pmd_qp_create_processed_ops_ring(qp, > + qp_conf->nb_descriptors, socket_id); > + if (qp->processed_ops == NULL) > + goto qp_setup_cleanup; > + > + qp->sess_mp = dev->data->session_pool; > + > + memset(&qp->stats, 0, sizeof(qp->stats)); > + > + return 0; > + > +qp_setup_cleanup: > + if (qp) > + rte_free(qp); > + > + return -1; > +} > + > +/** Start queue pair */ > +static int > +armv8_crypto_pmd_qp_start(__rte_unused struct rte_cryptodev *dev, > + __rte_unused uint16_t queue_pair_id) > +{ > + return -ENOTSUP; > +} > + > +/** Stop queue pair */ > +static int > +armv8_crypto_pmd_qp_stop(__rte_unused struct rte_cryptodev *dev, > + __rte_unused uint16_t queue_pair_id) > +{ > + return -ENOTSUP; > +} > + > +/** Return the number of allocated queue pairs */ > +static uint32_t > +armv8_crypto_pmd_qp_count(struct rte_cryptodev *dev) > +{ > + return dev->data->nb_queue_pairs; > +} > + > +/** Returns the size of the session structure */ > +static unsigned > +armv8_crypto_pmd_session_get_size(struct rte_cryptodev *dev __rte_unused) > +{ > + return sizeof(struct armv8_crypto_session); > +} > + > +/** Configure the session from a crypto xform chain */ > +static void * > +armv8_crypto_pmd_session_configure(struct rte_cryptodev *dev __rte_unused, > + struct rte_crypto_sym_xform *xform, void *sess) > +{ > + if (unlikely(sess == NULL)) { > + ARMV8_CRYPTO_LOG_ERR("invalid session struct"); > + return NULL; > + } > + > + if (armv8_crypto_set_session_parameters( > + sess, xform) != 0) { > + ARMV8_CRYPTO_LOG_ERR("failed configure session parameters"); > + return NULL; > + } > + > + return sess; > +} > + > +/** Clear the memory of session so it doesn't leave key material behind */ > +static void > +armv8_crypto_pmd_session_clear(struct rte_cryptodev *dev __rte_unused, > + void *sess) > +{ > + > + /* Zero out the whole structure */ > + if (sess) > + memset(sess, 0, sizeof(struct armv8_crypto_session)); > +} > + > +struct rte_cryptodev_ops armv8_crypto_pmd_ops = { > + .dev_configure = armv8_crypto_pmd_config, > + .dev_start = armv8_crypto_pmd_start, > + .dev_stop = armv8_crypto_pmd_stop, > + .dev_close = armv8_crypto_pmd_close, > + > + .stats_get = armv8_crypto_pmd_stats_get, > + .stats_reset = armv8_crypto_pmd_stats_reset, > + > + .dev_infos_get = armv8_crypto_pmd_info_get, > + > + .queue_pair_setup = armv8_crypto_pmd_qp_setup, > + .queue_pair_release = armv8_crypto_pmd_qp_release, > + .queue_pair_start = armv8_crypto_pmd_qp_start, > + .queue_pair_stop = armv8_crypto_pmd_qp_stop, > + .queue_pair_count = armv8_crypto_pmd_qp_count, > + > + .session_get_size = armv8_crypto_pmd_session_get_size, > + .session_configure = armv8_crypto_pmd_session_configure, > + .session_clear = armv8_crypto_pmd_session_clear > +}; > + > +struct rte_cryptodev_ops *rte_armv8_crypto_pmd_ops = &armv8_crypto_pmd_ops; > diff --git a/drivers/crypto/armv8/rte_armv8_pmd_private.h b/drivers/crypto/armv8/rte_armv8_pmd_private.h > new file mode 100644 > index 0000000..fe46cde > --- /dev/null > +++ b/drivers/crypto/armv8/rte_armv8_pmd_private.h > @@ -0,0 +1,211 @@ > +/* > + * BSD LICENSE > + * > + * Copyright (C) Cavium networks Ltd. 2017. > + * > + * Redistribution and use in source and binary forms, with or without > + * modification, are permitted provided that the following conditions > + * are met: > + * > + * * Redistributions of source code must retain the above copyright > + * notice, this list of conditions and the following disclaimer. > + * * Redistributions in binary form must reproduce the above copyright > + * notice, this list of conditions and the following disclaimer in > + * the documentation and/or other materials provided with the > + * distribution. > + * * Neither the name of Cavium networks nor the names of its > + * contributors may be used to endorse or promote products derived > + * from this software without specific prior written permission. > + * > + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS > + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT > + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR > + * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT > + * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, > + * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT > + * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, > + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY > + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT > + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE > + * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. > + */ > + > +#ifndef _RTE_ARMV8_PMD_PRIVATE_H_ > +#define _RTE_ARMV8_PMD_PRIVATE_H_ > + > +#define ARMV8_CRYPTO_LOG_ERR(fmt, args...) \ > + RTE_LOG(ERR, CRYPTODEV, "[%s] %s() line %u: " fmt "\n", \ > + RTE_STR(CRYPTODEV_NAME_ARMV8_CRYPTO_PMD), \ > + __func__, __LINE__, ## args) > + > +#ifdef RTE_LIBRTE_ARMV8_CRYPTO_DEBUG > +#define ARMV8_CRYPTO_LOG_INFO(fmt, args...) \ > + RTE_LOG(INFO, CRYPTODEV, "[%s] %s() line %u: " fmt "\n", \ > + RTE_STR(CRYPTODEV_NAME_ARMV8_CRYPTO_PMD), \ > + __func__, __LINE__, ## args) > + > +#define ARMV8_CRYPTO_LOG_DBG(fmt, args...) \ > + RTE_LOG(DEBUG, CRYPTODEV, "[%s] %s() line %u: " fmt "\n", \ > + RTE_STR(CRYPTODEV_NAME_ARMV8_CRYPTO_PMD), \ > + __func__, __LINE__, ## args) > + > +#define ARMV8_CRYPTO_ASSERT(con) \ > +do { \ > + if (!(con)) { \ > + rte_panic("%s(): " \ > + con "condition failed, line %u", __func__); \ > + } \ > +} while (0) > + > +#else > +#define ARMV8_CRYPTO_LOG_INFO(fmt, args...) > +#define ARMV8_CRYPTO_LOG_DBG(fmt, args...) > +#define ARMV8_CRYPTO_ASSERT(con) > +#endif > + > +#define NBBY 8 /* Number of bits in a byte */ is it being used somewhere? > +#define BYTE_LENGTH(x) ((x) / 8) /* Number of bytes in x (roun down) */ "round down" instead of "roun down" > + > +/** ARMv8 operation order mode enumerator */ > +enum armv8_crypto_chain_order { > + ARMV8_CRYPTO_CHAIN_CIPHER_AUTH, > + ARMV8_CRYPTO_CHAIN_AUTH_CIPHER, > + ARMV8_CRYPTO_CHAIN_NOT_SUPPORTED, > + ARMV8_CRYPTO_CHAIN_LIST_END = ARMV8_CRYPTO_CHAIN_NOT_SUPPORTED > +}; > + > +/** ARMv8 cipher operation enumerator */ > +enum armv8_crypto_cipher_operation { > + ARMV8_CRYPTO_CIPHER_OP_ENCRYPT = RTE_CRYPTO_CIPHER_OP_ENCRYPT, > + ARMV8_CRYPTO_CIPHER_OP_DECRYPT = RTE_CRYPTO_CIPHER_OP_DECRYPT, > + ARMV8_CRYPTO_CIPHER_OP_NOT_SUPPORTED, > + ARMV8_CRYPTO_CIPHER_OP_LIST_END = ARMV8_CRYPTO_CIPHER_OP_NOT_SUPPORTED > +}; > + > +enum armv8_crypto_cipher_keylen { > + ARMV8_CRYPTO_CIPHER_KEYLEN_128, > + ARMV8_CRYPTO_CIPHER_KEYLEN_192, > + ARMV8_CRYPTO_CIPHER_KEYLEN_256, > + ARMV8_CRYPTO_CIPHER_KEYLEN_NOT_SUPPORTED, > + ARMV8_CRYPTO_CIPHER_KEYLEN_LIST_END = > + ARMV8_CRYPTO_CIPHER_KEYLEN_NOT_SUPPORTED > +}; > + > +/** ARMv8 auth mode enumerator */ > +enum armv8_crypto_auth_mode { > + ARMV8_CRYPTO_AUTH_AS_AUTH, > + ARMV8_CRYPTO_AUTH_AS_HMAC, > + ARMV8_CRYPTO_AUTH_AS_CIPHER, > + ARMV8_CRYPTO_AUTH_NOT_SUPPORTED, > + ARMV8_CRYPTO_AUTH_LIST_END = ARMV8_CRYPTO_AUTH_NOT_SUPPORTED > +}; > + > +#define CRYPTO_ORDER_MAX ARMV8_CRYPTO_CHAIN_LIST_END > +#define CRYPTO_CIPHER_OP_MAX ARMV8_CRYPTO_CIPHER_OP_LIST_END > +#define CRYPTO_CIPHER_KEYLEN_MAX ARMV8_CRYPTO_CIPHER_KEYLEN_LIST_END > +#define CRYPTO_CIPHER_MAX RTE_CRYPTO_CIPHER_LIST_END > +#define CRYPTO_AUTH_MAX RTE_CRYPTO_AUTH_LIST_END > + > +#define HMAC_IPAD_VALUE (0x36) > +#define HMAC_OPAD_VALUE (0x5C) > + > +#define SHA256_AUTH_KEY_LENGTH (BYTE_LENGTH(256)) > +#define SHA256_BLOCK_SIZE (BYTE_LENGTH(512)) > + > +#define SHA1_AUTH_KEY_LENGTH (BYTE_LENGTH(160)) > +#define SHA1_BLOCK_SIZE (BYTE_LENGTH(512)) > + > +#define SHA_AUTH_KEY_MAX SHA256_AUTH_KEY_LENGTH > +#define SHA_BLOCK_MAX SHA256_BLOCK_SIZE > + > +typedef int (*crypto_func_t)(uint8_t *, uint8_t *, uint64_t, > + uint8_t *, uint8_t *, uint64_t, > + crypto_arg_t *); > + > +typedef void (*crypto_key_sched_t)(uint8_t *, const uint8_t *); > + > +/** private data structure for each ARMv8 crypto device */ > +struct armv8_crypto_private { > + unsigned int max_nb_qpairs; > + /**< Max number of queue pairs */ > + unsigned int max_nb_sessions; > + /**< Max number of sessions */ > +}; > + > +/** ARMv8 crypto queue pair */ > +struct armv8_crypto_qp { > + uint16_t id; > + /**< Queue Pair Identifier */ > + char name[RTE_CRYPTODEV_NAME_LEN]; > + /**< Unique Queue Pair Name */ > + struct rte_ring *processed_ops; > + /**< Ring for placing process packets */ > + struct rte_mempool *sess_mp; > + /**< Session Mempool */ > + struct rte_cryptodev_stats stats; > + /**< Queue pair statistics */ > +} __rte_cache_aligned; > + > +/** ARMv8 crypto private session structure */ > +struct armv8_crypto_session { > + enum armv8_crypto_chain_order chain_order; > + /**< chain order mode */ > + crypto_func_t crypto_func; > + /**< cryptographic function to use for this session */ > + > + /** Cipher Parameters */ > + struct { > + enum rte_crypto_cipher_operation direction; > + /**< cipher operation direction */ > + enum rte_crypto_cipher_algorithm algo; > + /**< cipher algorithm */ > + int iv_len; > + /**< IV length */ > + > + struct { > + uint8_t data[256]; > + /**< key data */ > + size_t length; > + /**< key length in bytes */ > + } key; > + > + crypto_key_sched_t key_sched; > + /**< Key schedule function */ > + } cipher; > + > + /** Authentication Parameters */ > + struct { > + enum rte_crypto_auth_operation operation; > + /**< auth operation generate or verify */ > + enum armv8_crypto_auth_mode mode; > + /**< auth operation mode */ > + > + union { > + struct { > + /* Add data if needed */ > + } auth; > + > + struct { > + uint8_t i_key_pad[SHA_BLOCK_MAX] > + __rte_cache_aligned; > + /**< inner pad (max supported block length) */ > + uint8_t o_key_pad[SHA_BLOCK_MAX] > + __rte_cache_aligned; > + /**< outer pad (max supported block length) */ > + uint8_t key[SHA_AUTH_KEY_MAX]; > + /**< HMAC key (max supported length)*/ > + } hmac; > + }; > + } auth; > + > +} __rte_cache_aligned; > + > +/** Set and validate ARMv8 crypto session parameters */ > +extern int armv8_crypto_set_session_parameters( > + struct armv8_crypto_session *sess, > + const struct rte_crypto_sym_xform *xform); > + > +/** device specific operations function pointer structure */ > +extern struct rte_cryptodev_ops *rte_armv8_crypto_pmd_ops; > + > +#endif /* _RTE_ARMV8_PMD_PRIVATE_H_ */ > diff --git a/drivers/crypto/armv8/rte_armv8_pmd_version.map b/drivers/crypto/armv8/rte_armv8_pmd_version.map > new file mode 100644 > index 0000000..1f84b68 > --- /dev/null > +++ b/drivers/crypto/armv8/rte_armv8_pmd_version.map > @@ -0,0 +1,3 @@ > +DPDK_17.02 { > + local: *; > +}; >