[dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

Hi Fiona,

One query with dpsk-17.11.2 ipsec-secgw.

I do see API ixgbe_crypto_enable_ipsec() returning me error for both rx/tx (dev_conf.rxmode.offloads/dev_conf.txmode.offloads) offload on my target X86 system.

It fails to read value whatever it writes either on IXGBE_SECRXCTRL or IXGBE_SECTXCTRL.
I am currently debugging this issue, but if I ignore these errors it continues & I can see
its handling packets also.

Does ignoring these errors mean simply its not enabling hw offloads for both rx/tx? 
Is my understanding correct? Other than that does it have any other side effect? 


Thanks,
Sanjib


-----Original Message-----
From: DAS, SANJIB 
Sent: Wednesday, May 9, 2018 5:48 PM
To: 'Trahe, Fiona' <fiona.trahe at intel.com>; users at dpdk.org; dts at dpdk.org; test-report at dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

Thanks a lot Fiona. It worked.

Thanks,
Sanjib

my page-0 wiki



-----Original Message-----
From: Trahe, Fiona [mailto:fiona.trahe at intel.com]
Sent: Wednesday, May 9, 2018 5:22 PM
To: DAS, SANJIB <sanjib.das at hpe.com>; users at dpdk.org; dts at dpdk.org; test-report at dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>; Trahe, Fiona <fiona.trahe at intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

CCM aead-iv-size should be between 7 and 13, you're setting to 16.
See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl capabilities


> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das at hpe.com]
> Sent: Wednesday, May 9, 2018 4:19 AM
> To: Trahe, Fiona <fiona.trahe at intel.com>; users at dpdk.org; 
> dts at dpdk.org; test-report at dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch at intel.com>; DAS, SANJIB <sanjib.das at hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks Fiona,
> 
> Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> But I do see it fails for CCM (dpdk-17.11.2). This API fails 
> rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> 
> 
> I used this command
> 
> ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0
> -- --devtype crypto_openssl --aead- algo aes-ccm --aead-key-sz 16 
> --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 
> --optype aead --silent --ptest throughput --total-ops 1000000
> 
> Not sure if others too faced this issue.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe at intel.com]
> Sent: Tuesday, May 8, 2018 3:26 PM
> To: DAS, SANJIB <sanjib.das at hpe.com>; users at dpdk.org; dts at dpdk.org; 
> test-report at dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch at intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Sanjib,
> 
> Copying Pablo who added unit tests for it in this commit - this should 
> give you an example of how to get it working:
> 77a217a19bb72860e26b9aefb19dce92239e0820
> 
> Also copying Fan who added CCM to aesni_mb PMD.
> 
> Fiona
> 
> > -----Original Message-----
> > From: users [mailto:users-bounces at dpdk.org] On Behalf Of DAS, SANJIB
> > Sent: Wednesday, May 2, 2018 3:21 PM
> > To: users at dpdk.org; dts at dpdk.org; test-report at dpdk.org
> > Cc: DAS, SANJIB <sanjib.das at hpe.com>
> > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hello team,
> >
> > I am currently executing performance testing using ipsec-secgw 
> > application for different crypto
> algorithms.
> > I was able to execute the tests for crypto algorithms CBC & GCM, but 
> > as such dint find much pointers on CCM.  From ipsec-secgw sample 
> > application source code (DPDK-18.02.1) also it looks CCM support is 
> > not there. Could you kindly share your comments on that. Can we 
> > actually execute ipsec-secgw
> application for crypto algorithm CCM?
> >
> 
> > Thanks,
> > Sanjib
> >
> > my page-0
> > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wik
> > i_
> > space>
> >
> >
> >
>