From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 5513EA0C47; Tue, 12 Oct 2021 12:24:04 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 21D6D41136; Tue, 12 Oct 2021 12:24:04 +0200 (CEST) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) by mails.dpdk.org (Postfix) with ESMTP id 7A9E541135 for ; Tue, 12 Oct 2021 12:24:02 +0200 (CEST) X-IronPort-AV: E=McAfee;i="6200,9189,10134"; a="207218912" X-IronPort-AV: E=Sophos;i="5.85,367,1624345200"; d="scan'208";a="207218912" Received: from orsmga004.jf.intel.com ([10.7.209.38]) by fmsmga106.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 12 Oct 2021 03:24:01 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.85,367,1624345200"; d="scan'208";a="591695541" Received: from fmsmsx605.amr.corp.intel.com ([10.18.126.85]) by orsmga004.jf.intel.com with ESMTP; 12 Oct 2021 03:24:00 -0700 Received: from fmsmsx605.amr.corp.intel.com (10.18.126.85) by fmsmsx605.amr.corp.intel.com (10.18.126.85) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.12; Tue, 12 Oct 2021 03:24:00 -0700 Received: from fmsedg601.ED.cps.intel.com (10.1.192.135) by fmsmsx605.amr.corp.intel.com (10.18.126.85) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.12 via Frontend Transport; Tue, 12 Oct 2021 03:24:00 -0700 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (104.47.55.103) by edgegateway.intel.com (192.55.55.70) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2242.12; Tue, 12 Oct 2021 03:23:57 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=F1vaNfWzF/g4whKSWhCSlfP9iIq4Xepb7W17TblUP0iev3TmytllCR7mMwt/vPfT6TQOJdOwcoeuoUfLID5cxhzDTVx70aePoCmQNudIUiLrXqdsbNzVevQAqrwBzFroJzOMzKVHi6E4BnLyyI00mqSoMYRBK6iK0ARdOcA6baBeT0aJNQVsQYyBiBG5ufNNrgzNOj7zgPeky6auhASSxma2S86sqLq4gGpHo/+o2amhbvHdLnU22ec2/OuZEXUJ8m8T5kkBmdBO5uLOqM+Ak/UIEF0IIaa8u5rPldMXlvVx9ExwiWJLVMITpjLyMerSUV9S/6FDWKIgCxhzM5Yqnw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=mW8Cxlkoo0uVBbh9tTRvt5fR+KlWQNbT8Ie2vIAENCM=; b=UHhTTe4ZXX9nc3kb0DNZxChKBXdh5N+rah7BbVfaBOg0j6MqQkv/Hyff7ZjGy5HqElU3PI1sU68sVHFyY8+N6bIdpXU+RpB5Nc3hfSJTWHBpbwb8L8MEJBTsnAbfF0yjEBU1VzDmktomvQs+dXfX63eqRa2idAU4qgNmbBZl5F9t4Y1EXsMFWHac3I0xKsL5V4JLg2cT+7a6u/YeYmWVm/GjcTKVIDEkv3OYPDT7T3dlLxfCyMNERgN3eLZiyYop6gvUAMLi08HkUyf4jVkLacBmW64xO86CySUvWJT1IaYDsc9RPgTct5BI6WQVJ2JL7MtCoG1O7786gAd7TK89gA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mW8Cxlkoo0uVBbh9tTRvt5fR+KlWQNbT8Ie2vIAENCM=; b=ZokxVve0QiWBz1LIKDnP+vGNLUzLiY1J/T7aZu7xHWt+jZCD5r/QHHB9kn3XyvVxvHV/Pgecd3AaiTXRMl0sJfKIhYWW4/SMx4cZFMSKsK0tT541RNQtYWeHGcLOjy+e2iQeVPlnU1HO+Av+6t5o1v+Hj2MnQk8scThBRto97Vc= Received: from DM6PR11MB4491.namprd11.prod.outlook.com (2603:10b6:5:204::19) by DM6PR11MB4187.namprd11.prod.outlook.com (2603:10b6:5:19e::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4587.25; Tue, 12 Oct 2021 10:23:50 +0000 Received: from DM6PR11MB4491.namprd11.prod.outlook.com ([fe80::740e:126e:c785:c8fd]) by DM6PR11MB4491.namprd11.prod.outlook.com ([fe80::740e:126e:c785:c8fd%4]) with mapi id 15.20.4587.026; Tue, 12 Oct 2021 10:23:50 +0000 From: "Ananyev, Konstantin" To: "Nicolau, Radu" , Ray Kinsella , Akhil Goyal , "Doherty, Declan" CC: "dev@dpdk.org" , "Medvedkin, Vladimir" , "Richardson, Bruce" , "Zhang, Roy Fan" , "hemant.agrawal@nxp.com" , "anoobj@marvell.com" , "Sinha, Abhijit" , "Buckley, Daniel M" , "marchana@marvell.com" , "ktejasree@marvell.com" , "matan@nvidia.com" Thread-Topic: [PATCH v8 01/10] security: add ESN field to ipsec_xform Thread-Index: AQHXvpTwR4ss2nHPHkyyVau4d+F1JqvPKUPg Date: Tue, 12 Oct 2021 10:23:50 +0000 Message-ID: References: <20210713133542.3550525-1-radu.nicolau@intel.com> <20211011112945.2876-1-radu.nicolau@intel.com> <20211011112945.2876-2-radu.nicolau@intel.com> In-Reply-To: <20211011112945.2876-2-radu.nicolau@intel.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-reaction: no-action dlp-version: 11.6.200.16 authentication-results: intel.com; dkim=none (message not signed) header.d=none;intel.com; dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 5f82a52a-7fb2-4fee-bf47-08d98d6a6232 x-ms-traffictypediagnostic: DM6PR11MB4187: x-ld-processed: 46c98d88-e344-4ed4-8496-4ed7712e255d,ExtAddr x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR11MB4491.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(38100700002)(8676002)(15650500001)(83380400001)(110136005)(54906003)(8936002)(2906002)(316002)(38070700005)(66946007)(186003)(86362001)(66446008)(64756008)(66556008)(66476007)(33656002)(52536014)(55016002)(76116006)(122000001)(71200400001)(5660300002)(26005)(4326008)(508600001)(7696005)(6506007)(9686003)(55236004)(6636002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?VZWuPEIMdF0s4EliEna7YLDCxGZavMY6vFRrhzq0a7hDnwFC8HinrqgQ24gD?= =?us-ascii?Q?EtbH6rhvXUVKxt77Dm5XFoDRWbB1Vez1UL8RvCIoQwXmjAeMCHwunyCByfNM?= =?us-ascii?Q?Rk452fzdo8+esJVY4duz8mS+IoWe1Er5sGjUm7Srio1kjikbXTlSdzgRtBlf?= =?us-ascii?Q?CXDAn1UXw/avsXN7IzAdYnWykG2mGdNQA0XOC/TzNk+DAojJR4b3CdJBH9n7?= =?us-ascii?Q?SkeJjKz04Wt2pI7nUi9PepFyczeEGnrUD9GueQc3GeLDdNTvIw0jaLEhhJKy?= =?us-ascii?Q?IjqQmKrUNnj8zLt6/vmerpRAnB7FBFSc5DRRb7nYS3Uvohze6DVQMPzEHNv8?= =?us-ascii?Q?R4Mm95GT2D8901Vm2d9UAbLuXd5Je3LO4KzRn6tkc1Eybg5ZeGDV7uhWl9hI?= =?us-ascii?Q?sA/sfhvr6dlbUea7HWwNdy541kLqiSTUvQVAVxaciSztw2wxQL7pqvGIowrc?= =?us-ascii?Q?ZbZUr/ZEN35yg4SiezoTOOfTrQWfMz9B9lyOX+ORAO/w93oLBZLjAnd5rs2x?= =?us-ascii?Q?Lx81W9t/ZNSopoPkAKjcxwxiXxyZHFZ43KywfkGx0kLSE9b78ASDBmZWy/wQ?= =?us-ascii?Q?HtWL2yqCbZkc3y3EZTAIJiv1YZTHZn1yZxYJTbYu0mIEqF+3B9/FlKmKKUGU?= =?us-ascii?Q?vq+lHEk8kzcvbmnUOPznwYY6Vq6UxNxKkJ/il2SSa0Pio/k1ks+m7z5oEn+O?= =?us-ascii?Q?Qt8EQLhL10bp8hXk99Vgt4yy05FewdqDgzXyugikel8igj4cnj6PBiZYyhvC?= =?us-ascii?Q?OqZP9m+e2SYd01mUEwrHX4VSc4zxmVLnaS1X2vJjB2QCLa2fBGuhmmxDeQgH?= =?us-ascii?Q?mieoApZXoqVZsLa1T28Nu2P5mJjroIx0STrLkIzGOXJ0aipGnHdSkBZAqA3u?= =?us-ascii?Q?RWdvEl+Hj3C7wtnEU4TYOX/a6ZfLVTIv3ZPeD/tGAxG2MSL6i02w0QLFFOVx?= =?us-ascii?Q?DZ0BLyLJtMERZMU6VidYISGLz7WDVJNzthNHKFD+C3Tgmtz6DPeX0ouiEkDm?= =?us-ascii?Q?feu3ABBr8PW2qwx95L0h/HzmYF0V820rq9IU/o0KDs2tfpQnmcIJ9h63wEIo?= =?us-ascii?Q?yCrdRzNuQ8CJvUfUNuKDEkXUIawwa+fnpIt6G1jHuwC21LmbAapPoqPIQDq3?= =?us-ascii?Q?0e3dTfnBLIE0fSDrrU/WS3TK+LaJRmw833I1rgju+VGuV4g0GTbS+CxDKzlp?= =?us-ascii?Q?/zPIXeTKYcqDPLUFFVoPLxPe2Yw1FGBCTNmsL9xMWUjTqjICxmCnW0rafQuL?= =?us-ascii?Q?JnGRi1iDn9Atg3xwpveVGdK+Uq41ZtOvbxqmDinR21rSD4MT6mq94eCRH33m?= =?us-ascii?Q?mSvVsTj5pr+Q11JDz2dp1NuY?= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR11MB4491.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5f82a52a-7fb2-4fee-bf47-08d98d6a6232 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2021 10:23:50.1689 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: mJ4OxkjZYQYMKAjRO9II42aLkcjx9T3dU00zbJUz5MhO5sdJRzGavLwMY/ASkVdyctxWa2xT8lLEeTIwMmYPHvdxzScl3wWQSFkIy3PYf+E= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB4187 X-OriginatorOrg: intel.com Subject: Re: [dpdk-dev] [PATCH v8 01/10] security: add ESN field to ipsec_xform X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" >=20 > Update ipsec_xform definition to include ESN field. > This allows the application to control the ESN starting value. >=20 > Signed-off-by: Declan Doherty > Signed-off-by: Radu Nicolau > Signed-off-by: Abhijit Sinha > Signed-off-by: Daniel Martin Buckley > Acked-by: Fan Zhang > Acked-by: Anoob Joseph > --- > doc/guides/rel_notes/deprecation.rst | 2 +- > doc/guides/rel_notes/release_21_11.rst | 4 ++++ > lib/security/rte_security.h | 8 ++++++++ > 3 files changed, 13 insertions(+), 1 deletion(-) >=20 > diff --git a/doc/guides/rel_notes/deprecation.rst b/doc/guides/rel_notes/= deprecation.rst > index baf15aa722..8b7b0beee2 100644 > --- a/doc/guides/rel_notes/deprecation.rst > +++ b/doc/guides/rel_notes/deprecation.rst > @@ -212,7 +212,7 @@ Deprecation Notices >=20 > * security: The structure ``rte_security_ipsec_xform`` will be extended = with > multiple fields: source and destination port of UDP encapsulation, > - IPsec payload MSS (Maximum Segment Size), and ESN (Extended Sequence N= umber). > + IPsec payload MSS (Maximum Segment Size). >=20 > * security: The IPsec SA config options ``struct rte_security_ipsec_sa_o= ptions`` > will be updated with new fields to support new features like IPsec inn= er > diff --git a/doc/guides/rel_notes/release_21_11.rst b/doc/guides/rel_note= s/release_21_11.rst > index c0a7f75518..401c6d453a 100644 > --- a/doc/guides/rel_notes/release_21_11.rst > +++ b/doc/guides/rel_notes/release_21_11.rst > @@ -229,6 +229,10 @@ ABI Changes > ``rte_security_ipsec_xform`` to allow applications to configure SA sof= t > and hard expiry limits. Limits can be either in number of packets or b= ytes. >=20 > +* security: A new structure ``esn`` was added in structure > + ``rte_security_ipsec_xform`` to set an initial ESN value. This permits > + application to start from an arbitrary ESN value for debug and SA life= time > + enforcement purposes. >=20 > Known Issues > ------------ > diff --git a/lib/security/rte_security.h b/lib/security/rte_security.h > index 2013e65e49..371d64647a 100644 > --- a/lib/security/rte_security.h > +++ b/lib/security/rte_security.h > @@ -280,6 +280,14 @@ struct rte_security_ipsec_xform { > /**< Anti replay window size to enable sequence replay attack handling. > * replay checking is disabled if the window size is 0. > */ > + union { > + uint64_t value; > + struct { > + uint32_t low; > + uint32_t hi; > + }; > + } esn; > + /**< Extended Sequence Number */ > }; >=20 > /** > -- Acked-by: Konstantin Ananyev > 2.25.1