From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 6D692A0548; Tue, 31 May 2022 07:13:15 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 8948442B7D; Tue, 31 May 2022 07:12:49 +0200 (CEST) Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) by mails.dpdk.org (Postfix) with ESMTP id 88B8F42B7C for ; Tue, 31 May 2022 07:12:47 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1653973967; x=1685509967; h=from:to:cc:subject:date:message-id:in-reply-to: references; bh=QPfRaX6OffvILptvm6I+5vfCZCPwDedZ/UMwu9SpNHo=; b=aaoVaZgmLKu2rr8Mdi6qxv5cg0bD+dS0iKHcfdUMt7G0yFrAdLARVogr OGMEfizZWwrhAbjifxZBRMpc0quu1nhAGX2Vr95S/NldidQtZ2e2ASN7Y 4iJy8FKeG/Gn3IWZymq2DTejiOtfBtXbYiwBkUy15nDIuD3N+SgnM/khn l9tJlKeMjEo7O0IaiKNpPlHSibpoP0WyGcIegQ6OArEf+6UxjwYoLZkHt yXyijRjEX15vdkGCsd97lOinfCpCds3u4Nydu5ZKBpY4s9JvH0FUYHHAt GkqkBzYhnRDLwgR+UdpYeFkGn4pAhwnEOHSA/2JPKCbv/gL72R0+HbeXy g==; X-IronPort-AV: E=McAfee;i="6400,9594,10363"; a="338181303" X-IronPort-AV: E=Sophos;i="5.91,264,1647327600"; d="scan'208";a="338181303" Received: from orsmga007.jf.intel.com ([10.7.209.58]) by orsmga105.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 30 May 2022 22:12:47 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.91,264,1647327600"; d="scan'208";a="576220505" Received: from silpixa00399302.ir.intel.com ([10.237.214.136]) by orsmga007.jf.intel.com with ESMTP; 30 May 2022 22:12:45 -0700 From: Arek Kusztal To: dev@dpdk.org Cc: gakhil@marvell.com, roy.fan.zhang@intel.com, Arek Kusztal , mdr@ashroe.eu Subject: [PATCH v4 06/12] cryptodev: add elliptic curve diffie hellman Date: Tue, 31 May 2022 05:04:33 +0100 Message-Id: <20220531040439.15862-7-arkadiuszx.kusztal@intel.com> X-Mailer: git-send-email 2.13.6 In-Reply-To: <20220531040439.15862-1-arkadiuszx.kusztal@intel.com> References: <20220531040439.15862-1-arkadiuszx.kusztal@intel.com> X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org - Added elliptic curve Diffie-Hellman parameters. Point multiplication allows the user to process every phase of ECDH, but for phase 1, user should not really care about the generator. The user does not even need to know what the generator looks like, therefore setting ec xform would make this work. Cc: mdr@ashroe.eu Signed-off-by: Arek Kusztal --- devtools/libabigail.abignore | 3 +++ lib/cryptodev/rte_crypto_asym.h | 38 ++++++++++++++++++++++++++++++++++++++ 2 files changed, 41 insertions(+) diff --git a/devtools/libabigail.abignore b/devtools/libabigail.abignore index 79ff15dc4e..6d174b291f 100644 --- a/devtools/libabigail.abignore +++ b/devtools/libabigail.abignore @@ -27,6 +27,9 @@ ; Ignore changes to rte_crypto_asym_op, asymmetric crypto API is experimental [suppress_type] name = rte_crypto_asym_op +; Ignore changes to rte_crypto_asym_xform_type, asymmetric crypto API is experimental +[suppress_type] + name = rte_crypto_asym_xform_type ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ; Temporary exceptions till next major ABI version ; diff --git a/lib/cryptodev/rte_crypto_asym.h b/lib/cryptodev/rte_crypto_asym.h index 88bc34dc8c..f61a2ddce8 100644 --- a/lib/cryptodev/rte_crypto_asym.h +++ b/lib/cryptodev/rte_crypto_asym.h @@ -99,6 +99,8 @@ enum rte_crypto_asym_xform_type { /**< Elliptic Curve Digital Signature Algorithm * Perform Signature Generation and Verification. */ + RTE_CRYPTO_ASYM_XFORM_ECDH, + /**< Elliptic Curve Diffie Hellman */ RTE_CRYPTO_ASYM_XFORM_ECPM, /**< Elliptic Curve Point Multiplication */ RTE_CRYPTO_ASYM_XFORM_TYPE_LIST_END @@ -429,6 +431,41 @@ struct rte_crypto_dh_op_param { }; /** + * Elliptic Curve Diffie-Hellman Operations params. + */ +struct rte_crypto_ecdh_op_param { + enum rte_crypto_asym_ke_type ke_type; + /**< Key exchange operation type */ + rte_crypto_uint priv_key; + /**< + * Output - generated private key when ke_type is + * RTE_CRYPTO_ASYM_KE_PRIVATE_KEY_GENERATE. + * + * Input - private key when ke_type is one of: + * RTE_CRYPTO_ASYM_KE_PUBLIC_KEY_GENERATE, + * RTE_CRYPTO_ASYM_KE_SHARED_SECRET_COMPUTE. + * + * In case priv_key.length is 0 and ke_type is set with + * RTE_CRYPTO_ASYM_KE_PUBLIC_KEY_GENERATE, CSRNG capable + * device will generate private key and use it for public + * key generation. + */ + struct rte_crypto_ec_point pub_key; + /**< + * Output - generated public key when ke_type is + * RTE_CRYPTO_ASYM_KE_PUBLIC_KEY_GENERATE. + * + * Input - peer's public key when ke_type is + * RTE_CRYPTO_ASYM_KE_SHARED_SECRET_COMPUTE. + */ + struct rte_crypto_ec_point shared_secret; + /**< + * Output - calculated shared secret when ke_type is + * RTE_CRYPTO_ASYM_KE_SHARED_SECRET_COMPUTE. + */ +}; + +/** * DSA Operations params * */ @@ -566,6 +603,7 @@ struct rte_crypto_asym_op { struct rte_crypto_mod_op_param modex; struct rte_crypto_mod_op_param modinv; struct rte_crypto_dh_op_param dh; + struct rte_crypto_ecdh_op_param ecdh; struct rte_crypto_dsa_op_param dsa; struct rte_crypto_ecdsa_op_param ecdsa; struct rte_crypto_ecpm_op_param ecpm; -- 2.13.6