From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 96029A0545 for ; Tue, 20 Dec 2022 20:53:27 +0100 (CET) Received: from mails.dpdk.org (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 3723040698; Tue, 20 Dec 2022 20:53:27 +0100 (CET) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) by mails.dpdk.org (Postfix) with ESMTP id 723FB40684 for ; Tue, 20 Dec 2022 20:53:25 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1671566005; x=1703102005; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=bVfKpAAhIY5HN6ev3mdbUa0tY8g+5HmEvMxpUkyVtcg=; b=muo8iThMWNfmvJItUyhw/X2GOv7U8z51bgxAUQMsyy68cvonQ4xXMzzO OCG/Z9a12lWXaESHjZju0+QkXMTUKDH4zp5MVwOQplgAWn3m4SAbCcO2/ 4OKPH+nS1cXe6OqPHXaa/Gw+zygyDcRI7H1xj5el/ISVz8lWPPEMzC7OQ UJAqW5kdaIfZAZC/uNVvgBpG7PmnAp9ZCUNoAe1mb2FFd/txGiOeXcAyE gXQ8bHPLp0cGuRt8isFIwF6s3G+fiK1S+I7KpO+ChW2a9UJeSs8c2iXy3 4/wVLBPkTwNETscp34F4g/f77Inb4zo/8gqeJagRRxuDzFBKOj042e6O0 g==; X-IronPort-AV: E=McAfee;i="6500,9779,10567"; a="405945188" X-IronPort-AV: E=Sophos;i="5.96,259,1665471600"; d="scan'208,217";a="405945188" Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by fmsmga105.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 20 Dec 2022 11:53:12 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6500,9779,10567"; a="979924667" X-IronPort-AV: E=Sophos;i="5.96,259,1665471600"; d="scan'208,217";a="979924667" Received: from orsmsx602.amr.corp.intel.com ([10.22.229.15]) by fmsmga005.fm.intel.com with ESMTP; 20 Dec 2022 11:53:11 -0800 Received: from orsmsx610.amr.corp.intel.com (10.22.229.23) by ORSMSX602.amr.corp.intel.com (10.22.229.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.16; Tue, 20 Dec 2022 11:53:09 -0800 Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by orsmsx610.amr.corp.intel.com (10.22.229.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.16 via Frontend Transport; Tue, 20 Dec 2022 11:53:09 -0800 Received: from NAM12-DM6-obe.outbound.protection.outlook.com (104.47.59.171) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.16; Tue, 20 Dec 2022 11:53:08 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SMJ3i9tICuCfI2U3g5BIVXrpNnuT5v1FAMQwSH43DaPEL9dBj9AkpowgHD2sW6BgUoEyTmZ2D01esv8AhQZf3R2j9FU6s6m+5fAVoTeNUTGOm6C+fcv4Dzkhofyo+4osT76JBxhWGKmAYpUpQRhr6QmyvpurlGE+xYxp4CV9mpAOxf2eQh+YR4HU/49i/npCz2huRmmbGP5F8dcUYz1osaqjinXNsZSp1yjcd+8a3q9g5cvYdRQUsnFSE5va3PbRf1HvmptFi6/Up0dKanKFbjhZIubY+IL8nDTEvXXqgu0ONNHK8a/zRlrQABMA+WbklOjGrjLdApDMQN3EtCBpuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=JyhJknklGu1vb1YykolffqOBM1uIHV1zCZYQ4DP6m8Y=; b=TE0ZLJDjEEyXyT85cUoECkvgd/5D9Ho2rIQR7euT2fTXUzVf7MABum13U9475EiKw7gw9HCgv3xDsFK630MJO4bb4nEueCf4ctnu01U2CQZgk5hm2YqDI2ADypaREE7AIZQBImoF9wnpMWUpeclo1ufxZBVmRjN+2+inEWBOWx1/CHGySeSIAI7U9Fkm6TIbsSSwo1ZhUapvyGCWYsLhwikTCtsnNO5yd6At29OMpik57BGB91gz9eRAoHNNYOfYl2NMYItVkN+ja4Z++IzsSZMpt+Nx8JrMWXueoL/x85WraCzVgmE5DIn1VDJ/fdKp+nfrMr3/ZKoKfFtf+nuJzw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none Received: from PH0PR11MB5013.namprd11.prod.outlook.com (2603:10b6:510:30::21) by CO1PR11MB4817.namprd11.prod.outlook.com (2603:10b6:303:98::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.16; Tue, 20 Dec 2022 19:53:05 +0000 Received: from PH0PR11MB5013.namprd11.prod.outlook.com ([fe80::2e9f:4600:1dce:b197]) by PH0PR11MB5013.namprd11.prod.outlook.com ([fe80::2e9f:4600:1dce:b197%9]) with mapi id 15.20.5924.016; Tue, 20 Dec 2022 19:53:05 +0000 From: "Kusztal, ArkadiuszX" To: Balakrishnan K CC: "users@dpdk.org" Subject: RE: Queries on OPENSSL PMD Thread-Topic: Queries on OPENSSL PMD Thread-Index: AdkUOv+2KXnCLLi9TtCD79IfVsz4jgAbaeCA Date: Tue, 20 Dec 2022 19:53:05 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_ActionId=ceb9ae9d-f1c3-4458-ab9f-c7580435b40e; MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_ContentBits=0; MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_Enabled=true; MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_Method=Privileged; MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_Name=General-Test; MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_SetDate=2022-12-20T06:46:38Z; MSIP_Label_5cbf6393-50e2-4904-bc3e-1804619f2b03_SiteId=20210462-2c5e-4ec8-b3e2-0be950f292ca; authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: PH0PR11MB5013:EE_|CO1PR11MB4817:EE_ x-ms-office365-filtering-correlation-id: 0a499aaa-4a8c-412b-5d59-08dae2c3cf70 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR11MB5013.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(136003)(376002)(396003)(39860400002)(366004)(346002)(451199015)(55016003)(64756008)(76116006)(66446008)(26005)(66476007)(66556008)(66946007)(8676002)(4326008)(9686003)(4743002)(53546011)(186003)(7696005)(6506007)(316002)(38070700005)(6916009)(122000001)(38100700002)(82960400001)(478600001)(52536014)(86362001)(33656002)(71200400001)(8936002)(9326002)(5660300002)(3480700007)(2906002)(41300700001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?ldteii/c0e8cEkikMINy3NRatQpSiErViS46anRcLxtq44YUP8MrQQpBS4zP?= =?us-ascii?Q?/Fr7iFqW4UgKONe0QBK3/xOM9/bQ+jCdih+baQHS8rEK8sGAwmBrNF3zLAub?= =?us-ascii?Q?L9hztN5e5CpKwHdX6U8Zu94Uel1AD5OYuf4XkLgWYT2efQ0pon2FOuEvWrCG?= =?us-ascii?Q?1jd3nT4diTlgKvnAYBVQ45MSdF6rUFMKjgJXt7AT4DDLmzmFQ2f4pAo3XiAk?= =?us-ascii?Q?UbGGE7BBW7ntS3CDpf+amiya3vGIzd1I3EOwtGk8uez51z9OW4F4fEijaHkk?= =?us-ascii?Q?eB/ulD3KlFS0Tr+gjq6GGJvTombi4yGhiq/v6eWbmp5eqSCK8LxzQ11xoGML?= =?us-ascii?Q?9C3liRWvIQwDFLyFK/MmvEkUb4LJRqGXucrvMNN0q1Sk8FL0GDzAxpIie/U9?= =?us-ascii?Q?t3hq3CBqlxiQPQXoy/lX5X0WElWbZVvT3d7IqONAiwwWj7BhwJ+5gvqENVNJ?= =?us-ascii?Q?jKPK17q1SnmBDKkKXi3RwjkV5rE/AG+Du0TLdRgWNXS9C9y3jrCEbrnG4+Ic?= =?us-ascii?Q?RBn/I45pmum9nI/wZJMfjAWX0elk3LzleY4MpTp7KkLCBnuc9OYh50YTqByX?= =?us-ascii?Q?qV6DxLx3SnwWA7y4ZjMZMBKtankCOOwHThJLBE9YgbnZ4g7gyNMLC5QaAX7k?= =?us-ascii?Q?tzhRJ290q62zJ94bFVFD/++3PG9C5w9eeiyxDtwmah3BJD7Xa7CCwJwec/2A?= =?us-ascii?Q?X+9CrV/He+aV/8/zIC3KhQ0jdgbtNq69+k9824wxeajafxgBus33e22XnyC8?= =?us-ascii?Q?0evJ+UOhUK2cZFFnUMOKyQqU4nCX6NtAct13/ksApWoWVSwACqsS/VP5eHm+?= =?us-ascii?Q?24qJTlkxp/H1Y6yRGeIcwKwYX6mJ1/MwDdimwHrZBmyG41sf52WnRnvSxanz?= =?us-ascii?Q?+5HNLqOa0J2K7h0i+XPuCzdTSc4rZXNoZKei+M6vACzatkD6c3qQwkwdazjB?= =?us-ascii?Q?ZIvOZmhacXMKcc8goWbwyPkWpLD7ZGEPaBJk5/ANinmp03ztypcfwIGjYqF/?= =?us-ascii?Q?Xg5tTd4k1T+6EWo+xlgJdSj/U+3JadtZHmv62Q+8POF/ycO4/2zBdNpX/HLW?= =?us-ascii?Q?UYxUP0DHIhtVTDFdN4JyCctTKWB9j3beHafP6mM/DO5odDYDc/loPVrGnc4h?= =?us-ascii?Q?ZZQPeR3crkHlbws/8i57jmpzo+H+KAOCF7NPIAvmCD8CLvs49RgqpzfiwdVv?= =?us-ascii?Q?joC+y1+XAAqFgXO2CnhCfmJTxgYm5h5PslXgVkW5SnsfetbaT0aQl11sT33d?= =?us-ascii?Q?za0frNXrtHYJRUziZm8vpi2h7x33vytpMLRFG4h6yTpFa8udbK732tS6vbq1?= =?us-ascii?Q?Z/4CjTE2CFQQK3gpV7pfPcipzXN0qIAFdKzYkxxwl9ajW7J14rnmT/riIaDi?= =?us-ascii?Q?g78BH3Eb+B8L3lwNV6ye6P5HAa89Oi5vSPRTkB/PcPwi3vUQBme144N4CP7y?= =?us-ascii?Q?o4RlcK3FU6VyiBIezywx/3mJ+iiJdocJChtMcR5dpGf7focxMO9zSb/MgTRf?= =?us-ascii?Q?zMTTheR2+PQFkFtiJmraUd8Vo9BT1sf2XNEl/dsKugwagYwBmM1EdItNqPaY?= =?us-ascii?Q?N85kUPQS/Er7vKZMPGPazGUotzYjxBnR+rdX6ahX3C6+YvKnWf+x1cLZTTuK?= =?us-ascii?Q?+A=3D=3D?= Content-Type: multipart/alternative; boundary="_000_PH0PR11MB50139974EE8C0B4C9AAA40B29FEA9PH0PR11MB5013namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB5013.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0a499aaa-4a8c-412b-5d59-08dae2c3cf70 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Dec 2022 19:53:05.2469 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IZ2HZERGsZRNYv8y1qtTfHA4AEhpDQsHLaGj65PxlAJah2Nipoq21oWDXvf8vnqxjHNQC2QQmCTeUcp/DPIDCHVPnEm/aJ20CLcBRvu1MRM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR11MB4817 X-OriginatorOrg: intel.com X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: users-bounces@dpdk.org --_000_PH0PR11MB50139974EE8C0B4C9AAA40B29FEA9PH0PR11MB5013namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Bala, >> Is DPDK has any supported API's do to the SSL handshake Yes. Of course DPDK by itself will not be able to process full TLS handshake, bu= t some of the necessary parts are there. * For key exchange one can use: RTE_CRYPTO_ASYM_XFORM_DH RTE_CRYPTO_ASYM_XFORM_ECDH RTE_CRYPTO_ASYM_XFORM_ECPM RTE_CRYPTO_ASYM_XFORM_ECFPM Of course there is the RSA, but not supported for KE since TLS1.3. * For digital signatures: RTE_CRYPTO_ASYM_XFORM_ECDSA RTE_CRYPTO_ASYM_XFORM_RSA >> store the session key which can be used to decrypt or encrypt the packet= s This will be done by the driver in private session data, as this is the ses= sion key. >> Is ECDH is supported in opnessl PMD. Currently unfortunately it is not. Thanks, Arek From: Balakrishnan K Sent: Tuesday, December 20, 2022 7:47 AM To: Kusztal, ArkadiuszX Cc: users@dpdk.org Subject: Queries on OPENSSL PMD Hi Arik, In openssl PMD I could see the API's for encrypt and decrypt which is= accept the key and iv and do the specified operation. I have few queries on how to get those keys suppose if, we are creating SSL= /TLS session . Is DPDK has any supported API's do to the SSL handshake and store the sessi= on key which can be used to decrypt or encrypt the packets. Is ECDH is supported in opnessl PMD. Regards, Bala --_000_PH0PR11MB50139974EE8C0B4C9AAA40B29FEA9PH0PR11MB5013namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Bala,

 

>> Is DPDK has any supported API’s do to= the SSL handshake

Yes.

Of course DPDK by itself will not be able to process= full TLS handshake, but some of the necessary parts are there.<= /p>

  • For key exchange one can use:

RTE_CRYPTO_ASYM_XFORM_DH

RTE_CRYPTO_ASYM_XFORM_ECDH

RTE_CRYPTO_ASYM_XFORM_ECPM

RTE_CRYPTO_ASYM_XFORM_ECFPM

Of course there is the RSA, but not supported for KE= since TLS1.3.

  • For digital signatures:

RTE_CRYPTO_ASYM_XFORM_ECDSA

RTE_CRYPTO_ASYM_XFORM_RSA

 

>> store the session key which can be used to = decrypt or encrypt the packets

This will be done by the driver in private session d= ata, as this is the session key.

 

>> Is ECDH is supported in opnessl PMD.

Currently unfortunately it is not.

 

Thanks,

Arek

 

From: Balakrishnan K <Balakrishnan.K1@tata= communications.com>
Sent: Tuesday, December 20, 2022 7:47 AM
To: Kusztal, ArkadiuszX <arkadiuszx.kusztal@intel.com>
Cc: users@dpdk.org
Subject: Queries on OPENSSL PMD

 

Hi Arik,

      In openssl PMD I coul= d see the API’s for encrypt and decrypt which is accept the key and i= v and do the specified operation.

I have few queries on how to get those keys suppose = if, we are creating SSL/TLS session .

Is DPDK has any supported API’s do to the SSL = handshake and store the session key which can be used to decrypt or encrypt= the packets.

Is ECDH is supported in opnessl PMD.

 

Regards,

Bala

 

--_000_PH0PR11MB50139974EE8C0B4C9AAA40B29FEA9PH0PR11MB5013namp_--