RE: Queries on OPENSSL PMD

["Kusztal, ArkadiuszX" <arkadiuszx.kusztal@intel.com>]

[-- Attachment #1: Type: text/plain, Size: 1408 bytes --]

Hi Bala,

>> Is DPDK has any supported API's do to the SSL handshake
Yes.
Of course DPDK by itself will not be able to process full TLS handshake, but some of the necessary parts are there.

  *   For key exchange one can use:
RTE_CRYPTO_ASYM_XFORM_DH
RTE_CRYPTO_ASYM_XFORM_ECDH
RTE_CRYPTO_ASYM_XFORM_ECPM
RTE_CRYPTO_ASYM_XFORM_ECFPM
Of course there is the RSA, but not supported for KE since TLS1.3.

  *   For digital signatures:
RTE_CRYPTO_ASYM_XFORM_ECDSA
RTE_CRYPTO_ASYM_XFORM_RSA

>> store the session key which can be used to decrypt or encrypt the packets
This will be done by the driver in private session data, as this is the session key.

>> Is ECDH is supported in opnessl PMD.
Currently unfortunately it is not.

Thanks,
Arek

From: Balakrishnan K <Balakrishnan.K1@tatacommunications.com>
Sent: Tuesday, December 20, 2022 7:47 AM
To: Kusztal, ArkadiuszX <arkadiuszx.kusztal@intel.com>
Cc: users@dpdk.org
Subject: Queries on OPENSSL PMD

Hi Arik,
      In openssl PMD I could see the API's for encrypt and decrypt which is accept the key and iv and do the specified operation.
I have few queries on how to get those keys suppose if, we are creating SSL/TLS session .
Is DPDK has any supported API's do to the SSL handshake and store the session key which can be used to decrypt or encrypt the packets.
Is ECDH is supported in opnessl PMD.

Regards,
Bala


[-- Attachment #2: Type: text/html, Size: 10764 bytes --]