[PATCH 0/2] IPsec on Arm

[PATCH 0/2] IPsec on Arm

[Ruifeng Wang]

This patch set integrates Arm port of ipsec_mb library.
ZUC and SNOW3g PMDs are available on Arm platform with this integration.

This series depends on:
http://patches.dpdk.org/project/dpdk/patch/20220630154123.2565439-1-asekhar@marvell.com/

Depends-on: patch-113578 ("crypto/ipsec_mb: enable support for arm64")

Ruifeng Wang (2):
  crypto/ipsec_mb: remove redundant includes
  crypto/ipsec_mb: enable IPsec on Arm platform

 app/test/test_cryptodev_hash_test_vectors.h  |  4 ++++
 doc/guides/cryptodevs/snow3g.rst             | 14 ++++++++++----
 doc/guides/cryptodevs/zuc.rst                | 14 ++++++++++----
 drivers/common/qat/meson.build               |  6 +++++-
 drivers/crypto/ipsec_mb/ipsec_mb_private.c   |  6 ++++++
 drivers/crypto/ipsec_mb/ipsec_mb_private.h   |  4 ++++
 drivers/crypto/ipsec_mb/meson.build          |  6 +++++-
 drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h |  2 --
 drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h  |  2 --
 drivers/crypto/qat/qat_sym_session.c         |  4 ++++
 10 files changed, 48 insertions(+), 14 deletions(-)

-- 
2.25.1

[PATCH 1/2] crypto/ipsec_mb: remove redundant includes

[Ruifeng Wang]

The intel-ipsec-mb header is included by ipsec_mb_private header file.
Hence removed intel-ipsec-mb from files that have ipsec_mb_private
included.

Signed-off-by: Ruifeng Wang <ruifeng.wang@arm.com>
---
 drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h | 2 --
 drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h  | 2 --
 2 files changed, 4 deletions(-)

diff --git a/drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h b/drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h
index 0f6bd7a2a5..55a0416030 100644
--- a/drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h
+++ b/drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h
@@ -5,8 +5,6 @@
 #ifndef _PMD_AESNI_GCM_PRIV_H_
 #define _PMD_AESNI_GCM_PRIV_H_
 
-#include <intel-ipsec-mb.h>
-
 #include "ipsec_mb_private.h"
 
 #define AESNI_GCM_IV_LENGTH 12
diff --git a/drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h b/drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h
index 9ef75aa51f..22d10ba6cf 100644
--- a/drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h
+++ b/drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h
@@ -5,8 +5,6 @@
 #ifndef _PMD_AESNI_MB_PRIV_H_
 #define _PMD_AESNI_MB_PRIV_H_
 
-#include <intel-ipsec-mb.h>
-
 #if defined(RTE_LIB_SECURITY)
 #define AESNI_MB_DOCSIS_SEC_ENABLED 1
 #include <rte_security.h>
-- 
2.25.1

[PATCH 2/2] crypto/ipsec_mb: enable IPsec on Arm platform

[Ruifeng Wang]

Arm port of ipsec_mb library [1] has different header file name than
the Intel ipsec_mb library. Proper header name is picked according to
the architecture to get the code compile when ipsec_mb is installed on
Arm platform.

And the Arm port currently supports ZUC and SNOW3g. Call to other
algorithms will be blocked.

[1] https://gitlab.arm.com/arm-reference-solutions/ipsec-mb/-/tree/main

Signed-off-by: Ruifeng Wang <ruifeng.wang@arm.com>
---
 app/test/test_cryptodev_hash_test_vectors.h |  4 ++++
 doc/guides/cryptodevs/snow3g.rst            | 14 ++++++++++----
 doc/guides/cryptodevs/zuc.rst               | 14 ++++++++++----
 drivers/common/qat/meson.build              |  6 +++++-
 drivers/crypto/ipsec_mb/ipsec_mb_private.c  |  6 ++++++
 drivers/crypto/ipsec_mb/ipsec_mb_private.h  |  4 ++++
 drivers/crypto/ipsec_mb/meson.build         |  6 +++++-
 drivers/crypto/qat/qat_sym_session.c        |  4 ++++
 8 files changed, 48 insertions(+), 10 deletions(-)

diff --git a/app/test/test_cryptodev_hash_test_vectors.h b/app/test/test_cryptodev_hash_test_vectors.h
index f7a0981636..5bd7858de4 100644
--- a/app/test/test_cryptodev_hash_test_vectors.h
+++ b/app/test/test_cryptodev_hash_test_vectors.h
@@ -6,8 +6,12 @@
 #define TEST_CRYPTODEV_HASH_TEST_VECTORS_H_
 
 #ifdef RTE_CRYPTO_AESNI_MB
+#if defined(RTE_ARCH_ARM)
+#include <ipsec-mb.h>
+#else
 #include <intel-ipsec-mb.h>
 #endif
+#endif
 
 static const uint8_t plaintext_hash[] = {
 	"What a lousy earth! He wondered how many people "
diff --git a/doc/guides/cryptodevs/snow3g.rst b/doc/guides/cryptodevs/snow3g.rst
index ad97f7d913..02e857c0d2 100644
--- a/doc/guides/cryptodevs/snow3g.rst
+++ b/doc/guides/cryptodevs/snow3g.rst
@@ -33,11 +33,17 @@ Installation
 ------------
 
 To build DPDK with the SNOW3G_PMD the user is required to download the multi-buffer
-library from `here <https://github.com/01org/intel-ipsec-mb>`_
-and compile it on their user system before building DPDK.
+library and compile it on their user system before building DPDK.
+
+For x86 system, the multi-buffer library is available
+`here <https://github.com/01org/intel-ipsec-mb>`_.
 The latest version of the library supported by this PMD is v1.2, which
 can be downloaded from `<https://github.com/01org/intel-ipsec-mb/archive/v1.2.zip>`_.
 
+For Arm system, ARM64 port of the multi-buffer library can be downloaded from
+`<https://gitlab.arm.com/arm-reference-solutions/ipsec-mb/-/tree/main/>`_. The
+latest version of the library supported by this PMD is tagged as SECLIB-IPSEC-2022.05.25.
+
 After downloading the library, the user needs to unpack and compile it
 on their system before building DPDK:
 
@@ -46,8 +52,8 @@ on their system before building DPDK:
     make
     make install
 
-The library requires NASM to be built. Depending on the library version, it might
-require a minimum NASM version (e.g. v0.54 requires at least NASM 2.14).
+The library requires NASM to be built on x86. Depending on the library version,
+it might require a minimum NASM version (e.g. v0.54 requires at least NASM 2.14).
 
 NASM is packaged for different OS. However, on some OS the version is too old,
 so a manual installation is required. In that case, NASM can be downloaded from
diff --git a/doc/guides/cryptodevs/zuc.rst b/doc/guides/cryptodevs/zuc.rst
index ea930ae152..10d44b7393 100644
--- a/doc/guides/cryptodevs/zuc.rst
+++ b/doc/guides/cryptodevs/zuc.rst
@@ -33,11 +33,17 @@ Installation
 ------------
 
 To build DPDK with the ZUC_PMD the user is required to download the multi-buffer
-library from `here <https://github.com/01org/intel-ipsec-mb>`_
-and compile it on their user system before building DPDK.
+library and compile it on their user system before building DPDK.
+
+For x86 system, the multi-buffer library is available
+`here <https://github.com/01org/intel-ipsec-mb>`_.
 The latest version of the library supported by this PMD is v1.2, which
 can be downloaded from `<https://github.com/01org/intel-ipsec-mb/archive/v1.2.zip>`_.
 
+For Arm system, ARM64 port of the multi-buffer library can be downloaded from
+`<https://gitlab.arm.com/arm-reference-solutions/ipsec-mb/-/tree/main/>`_. The
+latest version of the library supported by this PMD is tagged as SECLIB-IPSEC-2022.05.25.
+
 After downloading the library, the user needs to unpack and compile it
 on their system before building DPDK:
 
@@ -46,8 +52,8 @@ on their system before building DPDK:
     make
     make install
 
-The library requires NASM to be built. Depending on the library version, it might
-require a minimum NASM version (e.g. v0.54 requires at least NASM 2.14).
+The library requires NASM to be built on x86. Depending on the library version,
+it might require a minimum NASM version (e.g. v0.54 requires at least NASM 2.14).
 
 NASM is packaged for different OS. However, on some OS the version is too old,
 so a manual installation is required. In that case, NASM can be downloaded from
diff --git a/drivers/common/qat/meson.build b/drivers/common/qat/meson.build
index 245c0fbe61..8e5116acb5 100644
--- a/drivers/common/qat/meson.build
+++ b/drivers/common/qat/meson.build
@@ -36,11 +36,15 @@ if qat_crypto and not libcrypto.found()
 endif
 
 IMB_required_ver = '1.2.0'
+IMB_header = '#include<intel-ipsec-mb.h>'
+if arch_subdir == 'arm'
+    IMB_header = '#include<ipsec-mb.h>'
+endif
 libipsecmb = cc.find_library('IPSec_MB', required: false)
 if libipsecmb.found()
     # version comes with quotes, so we split based on " and take the middle
     imb_ver = cc.get_define('IMB_VERSION_STR',
-        prefix : '#include<intel-ipsec-mb.h>').split('"')[1]
+        prefix : IMB_header).split('"')[1]
 
     if (imb_ver.version_compare('>=' + IMB_required_ver))
         ext_deps += libipsecmb
diff --git a/drivers/crypto/ipsec_mb/ipsec_mb_private.c b/drivers/crypto/ipsec_mb/ipsec_mb_private.c
index b555a28a0b..1bc9744f09 100644
--- a/drivers/crypto/ipsec_mb/ipsec_mb_private.c
+++ b/drivers/crypto/ipsec_mb/ipsec_mb_private.c
@@ -53,6 +53,12 @@ ipsec_mb_create(struct rte_vdev_device *vdev,
 	const char *name, *args;
 	int retval;
 
+#if defined(RTE_ARCH_ARM)
+	if ((pmd_type != IPSEC_MB_PMD_TYPE_SNOW3G) &&
+		(pmd_type != IPSEC_MB_PMD_TYPE_ZUC))
+		return -ENOTSUP;
+#endif
+
 #if defined(RTE_ARCH_ARM64)
 	vector_mode = IPSEC_MB_ARM64;
 #elif defined(RTE_ARCH_X86_64)
diff --git a/drivers/crypto/ipsec_mb/ipsec_mb_private.h b/drivers/crypto/ipsec_mb/ipsec_mb_private.h
index d0a1bcc360..d074b33133 100644
--- a/drivers/crypto/ipsec_mb/ipsec_mb_private.h
+++ b/drivers/crypto/ipsec_mb/ipsec_mb_private.h
@@ -5,7 +5,11 @@
 #ifndef _IPSEC_MB_PRIVATE_H_
 #define _IPSEC_MB_PRIVATE_H_
 
+#if defined(RTE_ARCH_ARM)
+#include <ipsec-mb.h>
+#else
 #include <intel-ipsec-mb.h>
+#endif
 #include <cryptodev_pmd.h>
 #include <rte_bus_vdev.h>
 
diff --git a/drivers/crypto/ipsec_mb/meson.build b/drivers/crypto/ipsec_mb/meson.build
index a89b29d6c3..64fc22611d 100644
--- a/drivers/crypto/ipsec_mb/meson.build
+++ b/drivers/crypto/ipsec_mb/meson.build
@@ -8,6 +8,10 @@ if is_windows
 endif
 
 IMB_required_ver = '1.0.0'
+IMB_header = '#include<intel-ipsec-mb.h>'
+if arch_subdir == 'arm'
+    IMB_header = '#include<ipsec-mb.h>'
+endif
 lib = cc.find_library('IPSec_MB', required: false)
 if not lib.found()
     build = false
@@ -17,7 +21,7 @@ else
 
     # version comes with quotes, so we split based on " and take the middle
     imb_ver = cc.get_define('IMB_VERSION_STR',
-        prefix : '#include<intel-ipsec-mb.h>').split('"')[1]
+        prefix : IMB_header).split('"')[1]
 
     if (imb_ver == '') or (imb_ver.version_compare('<' + IMB_required_ver))
         reason = 'IPSec_MB version >= @0@ is required, found version @1@'.format(
diff --git a/drivers/crypto/qat/qat_sym_session.c b/drivers/crypto/qat/qat_sym_session.c
index b30396487e..59922cb824 100644
--- a/drivers/crypto/qat/qat_sym_session.c
+++ b/drivers/crypto/qat/qat_sym_session.c
@@ -10,8 +10,12 @@
 #include <openssl/evp.h>	/* Needed for bpi runt block processing */
 
 #ifdef RTE_QAT_LIBIPSECMB
+#if defined(RTE_ARCH_ARM)
+#include <ipsec-mb.h>
+#else
 #include <intel-ipsec-mb.h>
 #endif
+#endif
 
 #include <rte_memcpy.h>
 #include <rte_common.h>
-- 
2.25.1

Re: [PATCH 2/2] crypto/ipsec_mb: enable IPsec on Arm platform

[David Marchand]

On Wed, Jul 27, 2022 at 10:14 AM Ruifeng Wang <ruifeng.wang@arm.com> wrote:
>
> Arm port of ipsec_mb library [1] has different header file name than
> the Intel ipsec_mb library. Proper header name is picked according to
> the architecture to get the code compile when ipsec_mb is installed on
> Arm platform.
>
> And the Arm port currently supports ZUC and SNOW3g. Call to other
> algorithms will be blocked.
>
> [1] https://gitlab.arm.com/arm-reference-solutions/ipsec-mb/-/tree/main

Is it planned to get this port merged in the original repo?


-- 
David Marchand

RE: [PATCH 2/2] crypto/ipsec_mb: enable IPsec on Arm platform

[Ruifeng Wang]

> -----Original Message-----
> From: David Marchand <david.marchand@redhat.com>
> Sent: Wednesday, July 27, 2022 4:34 PM
> To: Ruifeng Wang <Ruifeng.Wang@arm.com>
> Cc: Fan Zhang <roy.fan.zhang@intel.com>; Pablo de Lara
> <pablo.de.lara.guarch@intel.com>; Wang, Yipeng1
> <yipeng1.wang@intel.com>; Gobriel, Sameh <sameh.gobriel@intel.com>;
> Bruce Richardson <bruce.richardson@intel.com>; Vladimir Medvedkin
> <vladimir.medvedkin@intel.com>; Akhil Goyal <gakhil@marvell.com>; dev
> <dev@dpdk.org>; Honnappa Nagarahalli <Honnappa.Nagarahalli@arm.com>;
> nd <nd@arm.com>; thomas@monjalon.net
> Subject: Re: [PATCH 2/2] crypto/ipsec_mb: enable IPsec on Arm platform
> 
> On Wed, Jul 27, 2022 at 10:14 AM Ruifeng Wang <ruifeng.wang@arm.com>
> wrote:
> >
> > Arm port of ipsec_mb library [1] has different header file name than
> > the Intel ipsec_mb library. Proper header name is picked according to
> > the architecture to get the code compile when ipsec_mb is installed on
> > Arm platform.
> >
> > And the Arm port currently supports ZUC and SNOW3g. Call to other
> > algorithms will be blocked.
> >
> > [1]
> > https://gitlab.arm.com/arm-reference-solutions/ipsec-mb/-/tree/main
> 
> Is it planned to get this port merged in the original repo?

Yes, it is intended to get this port merged in the original repo.
Efforts are being made. Code not merged yet.
> 
> 
> --
> David Marchand

[PATCH 2/2] crypto/ipsec_mb: enable IPsec on Arm platform

[Ashwin Sekhar T K]

Acked-by: Ashwin Sekhar T K <asekhar@marvell.com>

RE: [PATCH 2/2] crypto/ipsec_mb: enable IPsec on Arm platform

[Honnappa Nagarahalli]

<snip>

> >
> > On Wed, Jul 27, 2022 at 10:14 AM Ruifeng Wang <ruifeng.wang@arm.com>
> > wrote:
> > >
> > > Arm port of ipsec_mb library [1] has different header file name than
> > > the Intel ipsec_mb library. Proper header name is picked according
> > > to the architecture to get the code compile when ipsec_mb is
> > > installed on Arm platform.
> > >
> > > And the Arm port currently supports ZUC and SNOW3g. Call to other
> > > algorithms will be blocked.
> > >
> > > [1]
> > > https://gitlab.arm.com/arm-reference-solutions/ipsec-mb/-/tree/main
> >
> > Is it planned to get this port merged in the original repo?
We tried before forking, there were non-technical challenges. We hope it will get unified in the future at least. But for now, it is a separate repo which will be synced regularly with the original repo. This forked repo is fully supported by Arm.

> 
> Yes, it is intended to get this port merged in the original repo.
> Efforts are being made. Code not merged yet.
> >
> >
> > --
> > David Marchand
> 

RE: [EXT] [PATCH 0/2] IPsec on Arm

[Akhil Goyal]

Hi Fan/Pablo,

Do you have comments on this patchset?

> This patch set integrates Arm port of ipsec_mb library.
> ZUC and SNOW3g PMDs are available on Arm platform with this integration.
> 
> This series depends on:
> http://patches.dpdk.org/project/dpdk/patch/20220630154123.2565439-1-asekhar@marvell.com/
> 
> Depends-on: patch-113578 ("crypto/ipsec_mb: enable support for arm64")
> 
> Ruifeng Wang (2):
>   crypto/ipsec_mb: remove redundant includes
>   crypto/ipsec_mb: enable IPsec on Arm platform
> 
>  app/test/test_cryptodev_hash_test_vectors.h  |  4 ++++
>  doc/guides/cryptodevs/snow3g.rst             | 14 ++++++++++----
>  doc/guides/cryptodevs/zuc.rst                | 14 ++++++++++----
>  drivers/common/qat/meson.build               |  6 +++++-
>  drivers/crypto/ipsec_mb/ipsec_mb_private.c   |  6 ++++++
>  drivers/crypto/ipsec_mb/ipsec_mb_private.h   |  4 ++++
>  drivers/crypto/ipsec_mb/meson.build          |  6 +++++-
>  drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h |  2 --
>  drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h  |  2 --
>  drivers/crypto/qat/qat_sym_session.c         |  4 ++++
>  10 files changed, 48 insertions(+), 14 deletions(-)
> 
> --
> 2.25.1

RE: [PATCH 0/2] IPsec on Arm

[Zhang, Roy Fan]

Hi Ruifeng,

We have no technical issues with these patches based on their current functionality. However, it is worth pointing out that we are planning some changes to the Intel® Multi-Buffer Crypto for IPSec library which will require API changes in the future. These changes are, but not limited to, to consolidate some of the crypto PMDs into a single PMD, which will simplify the code and reduce future maintenance effort. When these changes are made, your library will need to be updated too in order to take advantage of the consolidation. We can provide further details of the changes that we’re considering separately, so that you’re not taken by surprise when these change occurs.

We also want you to know, for any change we will make to these PMDs, we do not guarantee it works on ARM platform. We advise you to do necessary testing/verification in necessary testing/verification to the future patches for the PMDs based on ipsec-mb on your platform.

Regards,
Fan

> -----Original Message-----
> From: Ruifeng Wang <ruifeng.wang@arm.com>
> Sent: Wednesday, July 27, 2022 9:14 AM
> To: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>; Wang, Yipeng1
> <yipeng1.wang@intel.com>; Gobriel, Sameh <sameh.gobriel@intel.com>;
> Richardson, Bruce <bruce.richardson@intel.com>; Medvedkin, Vladimir
> <vladimir.medvedkin@intel.com>; gakhil@marvell.com
> Cc: dev@dpdk.org; honnappa.nagarahalli@arm.com; nd@arm.com; Ruifeng
> Wang <ruifeng.wang@arm.com>
> Subject: [PATCH 0/2] IPsec on Arm
> 
> This patch set integrates Arm port of ipsec_mb library.
> ZUC and SNOW3g PMDs are available on Arm platform with this integration.
> 
> This series depends on:
> http://patches.dpdk.org/project/dpdk/patch/20220630154123.2565439-1-
> asekhar@marvell.com/
> 
> Depends-on: patch-113578 ("crypto/ipsec_mb: enable support for arm64")
> 
> Ruifeng Wang (2):
>   crypto/ipsec_mb: remove redundant includes
>   crypto/ipsec_mb: enable IPsec on Arm platform
> 
>  app/test/test_cryptodev_hash_test_vectors.h  |  4 ++++
>  doc/guides/cryptodevs/snow3g.rst             | 14 ++++++++++----
>  doc/guides/cryptodevs/zuc.rst                | 14 ++++++++++----
>  drivers/common/qat/meson.build               |  6 +++++-
>  drivers/crypto/ipsec_mb/ipsec_mb_private.c   |  6 ++++++
>  drivers/crypto/ipsec_mb/ipsec_mb_private.h   |  4 ++++
>  drivers/crypto/ipsec_mb/meson.build          |  6 +++++-
>  drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h |  2 --
>  drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h  |  2 --
>  drivers/crypto/qat/qat_sym_session.c         |  4 ++++
>  10 files changed, 48 insertions(+), 14 deletions(-)
> 
> --
> 2.25.1

RE: [PATCH 0/2] IPsec on Arm

[Ruifeng Wang]

> -----Original Message-----
> From: Zhang, Roy Fan <roy.fan.zhang@intel.com>
> Sent: Monday, August 22, 2022 3:54 PM
> To: Ruifeng Wang <Ruifeng.Wang@arm.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>; Wang, Yipeng1 <yipeng1.wang@intel.com>; Gobriel, Sameh
> <sameh.gobriel@intel.com>; Richardson, Bruce <bruce.richardson@intel.com>; Medvedkin,
> Vladimir <vladimir.medvedkin@intel.com>; gakhil@marvell.com
> Cc: dev@dpdk.org; Honnappa Nagarahalli <Honnappa.Nagarahalli@arm.com>; nd <nd@arm.com>
> Subject: RE: [PATCH 0/2] IPsec on Arm
> 
> Hi Ruifeng,
Hi Fan,

> 
> We have no technical issues with these patches based on their current functionality.
> However, it is worth pointing out that we are planning some changes to the Intel(r) Multi-
> Buffer Crypto for IPSec library which will require API changes in the future. These
> changes are, but not limited to, to consolidate some of the crypto PMDs into a single PMD,
> which will simplify the code and reduce future maintenance effort. When these changes are
> made, your library will need to be updated too in order to take advantage of the
Thanks for the heads-up. Really appreciate it.

> consolidation. We can provide further details of the changes that we're considering
> separately, so that you're not taken by surprise when these change occurs.
Yep, let's communicate this in a separate thread.

> 
> We also want you to know, for any change we will make to these PMDs, we do not guarantee
> it works on ARM platform. We advise you to do necessary testing/verification in necessary
> testing/verification to the future patches for the PMDs based on ipsec-mb on your platform.
Yes, I will verify ZUC/SNOW3g PMD patches on Arm platform.

> 
> Regards,
> Fan
> 
> > -----Original Message-----
> > From: Ruifeng Wang <ruifeng.wang@arm.com>
> > Sent: Wednesday, July 27, 2022 9:14 AM
> > To: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> > <pablo.de.lara.guarch@intel.com>; Wang, Yipeng1
> > <yipeng1.wang@intel.com>; Gobriel, Sameh <sameh.gobriel@intel.com>;
> > Richardson, Bruce <bruce.richardson@intel.com>; Medvedkin, Vladimir
> > <vladimir.medvedkin@intel.com>; gakhil@marvell.com
> > Cc: dev@dpdk.org; honnappa.nagarahalli@arm.com; nd@arm.com; Ruifeng
> > Wang <ruifeng.wang@arm.com>
> > Subject: [PATCH 0/2] IPsec on Arm
> >
> > This patch set integrates Arm port of ipsec_mb library.
> > ZUC and SNOW3g PMDs are available on Arm platform with this integration.
> >
> > This series depends on:
> > http://patches.dpdk.org/project/dpdk/patch/20220630154123.2565439-1-
> > asekhar@marvell.com/
> >
> > Depends-on: patch-113578 ("crypto/ipsec_mb: enable support for arm64")
> >
> > Ruifeng Wang (2):
> >   crypto/ipsec_mb: remove redundant includes
> >   crypto/ipsec_mb: enable IPsec on Arm platform
> >
> >  app/test/test_cryptodev_hash_test_vectors.h  |  4 ++++
> >  doc/guides/cryptodevs/snow3g.rst             | 14 ++++++++++----
> >  doc/guides/cryptodevs/zuc.rst                | 14 ++++++++++----
> >  drivers/common/qat/meson.build               |  6 +++++-
> >  drivers/crypto/ipsec_mb/ipsec_mb_private.c   |  6 ++++++
> >  drivers/crypto/ipsec_mb/ipsec_mb_private.h   |  4 ++++
> >  drivers/crypto/ipsec_mb/meson.build          |  6 +++++-
> >  drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h |  2 --
> > drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h  |  2 --
> >  drivers/crypto/qat/qat_sym_session.c         |  4 ++++
> >  10 files changed, 48 insertions(+), 14 deletions(-)
> >
> > --
> > 2.25.1

RE: [PATCH 0/2] IPsec on Arm

[Akhil Goyal]

> Hi Ruifeng,
> 
> We have no technical issues with these patches based on their current
> functionality. However, it is worth pointing out that we are planning some
> changes to the Intel(r) Multi-Buffer Crypto for IPSec library which will require API
> changes in the future. These changes are, but not limited to, to consolidate
> some of the crypto PMDs into a single PMD, which will simplify the code and
> reduce future maintenance effort. When these changes are made, your library
> will need to be updated too in order to take advantage of the consolidation. We
> can provide further details of the changes that we're considering separately, so
> that you're not taken by surprise when these change occurs.
> 
> We also want you to know, for any change we will make to these PMDs, we do
> not guarantee it works on ARM platform. We advise you to do necessary
> testing/verification in necessary testing/verification to the future patches for
> the PMDs based on ipsec-mb on your platform.


> > This patch set integrates Arm port of ipsec_mb library.
> > ZUC and SNOW3g PMDs are available on Arm platform with this integration.
> >
> > This series depends on:
> > https://urldefense.proofpoint.com/v2/url?u=http-
> 3A__patches.dpdk.org_project_dpdk_patch_20220630154123.2565439-2D1-
> 2D&d=DwIF-
> g&c=nKjWec2b6R0mOyPaz7xtfQ&r=DnL7Si2wl_PRwpZ9TWey3eu68gBzn7DkPw
> uqhd6WNyo&m=MSflaO84SEZbIx1iRuPLHdFCx1Tt55MDafiMzZITc2CEoY-
> Zid36my-fIfMSmooi&s=rLK324Pjv9lI3_LVXCQaQ6-Yb7fT9y1kE6_S68741Ec&e=
> > asekhar@marvell.com/
> >
> > Depends-on: patch-113578 ("crypto/ipsec_mb: enable support for arm64")
> >
> > Ruifeng Wang (2):
> >   crypto/ipsec_mb: remove redundant includes
> >   crypto/ipsec_mb: enable IPsec on Arm platform
> >
> >  app/test/test_cryptodev_hash_test_vectors.h  |  4 ++++
> >  doc/guides/cryptodevs/snow3g.rst             | 14 ++++++++++----
> >  doc/guides/cryptodevs/zuc.rst                | 14 ++++++++++----
> >  drivers/common/qat/meson.build               |  6 +++++-
> >  drivers/crypto/ipsec_mb/ipsec_mb_private.c   |  6 ++++++
> >  drivers/crypto/ipsec_mb/ipsec_mb_private.h   |  4 ++++
> >  drivers/crypto/ipsec_mb/meson.build          |  6 +++++-
> >  drivers/crypto/ipsec_mb/pmd_aesni_gcm_priv.h |  2 --
> >  drivers/crypto/ipsec_mb/pmd_aesni_mb_priv.h  |  2 --
> >  drivers/crypto/qat/qat_sym_session.c         |  4 ++++
> >  10 files changed, 48 insertions(+), 14 deletions(-)
Series applied to dpdk-next-crypto

Thanks