Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

["Trahe, Fiona" <fiona.trahe@intel.com>]

CCM aead-iv-size should be between 7 and 13, you're setting to 16.
See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl capabilities


> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> Sent: Wednesday, May 9, 2018 4:19 AM
> To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks Fiona,
> 
> Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> But I do see it fails for CCM (dpdk-17.11.2). This API fails
> rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> 
> 
> I used this command
> 
> ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0 -- --devtype crypto_openssl --aead-
> algo aes-ccm --aead-key-sz 16 --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 --optype
> aead --silent --ptest throughput --total-ops 1000000
> 
> Not sure if others too faced this issue.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> Sent: Tuesday, May 8, 2018 3:26 PM
> To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Sanjib,
> 
> Copying Pablo who added unit tests for it in this commit - this should give you an example of how to get
> it working:
> 77a217a19bb72860e26b9aefb19dce92239e0820
> 
> Also copying Fan who added CCM to aesni_mb PMD.
> 
> Fiona
> 
> > -----Original Message-----
> > From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> > Sent: Wednesday, May 2, 2018 3:21 PM
> > To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> > Cc: DAS, SANJIB <sanjib.das@hpe.com>
> > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hello team,
> >
> > I am currently executing performance testing using ipsec-secgw application for different crypto
> algorithms.
> > I was able to execute the tests for crypto algorithms CBC & GCM, but
> > as such dint find much pointers on CCM.  From ipsec-secgw sample
> > application source code (DPDK-18.02.1) also it looks CCM support is
> > not there. Could you kindly share your comments on that. Can we actually execute ipsec-secgw
> application for crypto algorithm CCM?
> >
> 
> > Thanks,
> > Sanjib
> >
> > my page-0
> > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wiki_
> > space>
> >
> >
> >
>