[dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

No problem Fiona,
Appreciate your reply. 

Hi Pablo/Fiona,

Thought of asking you one more query, is there any sample ipsec-secgw config file
with SA rules for 'out' traffic. Looking for one with CGM & CCM support.
Just wanted to compare with mine.


Thanks,
Sanjib

my page-0 wiki


-----Original Message-----
From: Trahe, Fiona [mailto:fiona.trahe at intel.com] 
Sent: Wednesday, May 16, 2018 7:53 PM
To: DAS, SANJIB <sanjib.das at hpe.com>; users at dpdk.org; dts at dpdk.org; test-report at dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

Sorry Sanjib,

I'm not familiar with that API or error.

Fiona

> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das at hpe.com]
> Sent: Wednesday, May 16, 2018 8:35 AM
> To: Trahe, Fiona <fiona.trahe at intel.com>; users at dpdk.org; 
> dts at dpdk.org; test-report at dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch at intel.com>; DAS, SANJIB <sanjib.das at hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Fiona,
> 
> One query with dpsk-17.11.2 ipsec-secgw.
> 
> I do see API ixgbe_crypto_enable_ipsec() returning me error for both 
> rx/tx
> (dev_conf.rxmode.offloads/dev_conf.txmode.offloads) offload on my target X86 system.
> 
> It fails to read value whatever it writes either on IXGBE_SECRXCTRL or IXGBE_SECTXCTRL.
> I am currently debugging this issue, but if I ignore these errors it 
> continues & I can see its handling packets also.
> 
> Does ignoring these errors mean simply its not enabling hw offloads for both rx/tx?
> Is my understanding correct? Other than that does it have any other side effect?
> 
> 
> Thanks,
> Sanjib
> 
> 
> -----Original Message-----
> From: DAS, SANJIB
> Sent: Wednesday, May 9, 2018 5:48 PM
> To: 'Trahe, Fiona' <fiona.trahe at intel.com>; users at dpdk.org; 
> dts at dpdk.org; test-report at dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch at intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks a lot Fiona. It worked.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe at intel.com]
> Sent: Wednesday, May 9, 2018 5:22 PM
> To: DAS, SANJIB <sanjib.das at hpe.com>; users at dpdk.org; dts at dpdk.org; 
> test-report at dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch at intel.com>; Trahe, Fiona <fiona.trahe at intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> CCM aead-iv-size should be between 7 and 13, you're setting to 16.
> See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl 
> capabilities
> 
> 
> > -----Original Message-----
> > From: DAS, SANJIB [mailto:sanjib.das at hpe.com]
> > Sent: Wednesday, May 9, 2018 4:19 AM
> > To: Trahe, Fiona <fiona.trahe at intel.com>; users at dpdk.org; 
> > dts at dpdk.org; test-report at dpdk.org
> > Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> > <pablo.de.lara.guarch at intel.com>; DAS, SANJIB <sanjib.das at hpe.com>
> > Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> >
> > Thanks Fiona,
> >
> > Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> > But I do see it fails for CCM (dpdk-17.11.2). This API fails 
> > rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> >
> >
> > I used this command
> >
> > ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0
> > -- --devtype crypto_openssl --aead- algo aes-ccm --aead-key-sz 16 
> > --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 
> > --optype aead --silent --ptest throughput --total-ops 1000000
> >
> > Not sure if others too faced this issue.
> >
> > Thanks,
> > Sanjib
> >
> > my page-0 wiki
> >
> >
> > -----Original Message-----
> > From: Trahe, Fiona [mailto:fiona.trahe at intel.com]
> > Sent: Tuesday, May 8, 2018 3:26 PM
> > To: DAS, SANJIB <sanjib.das at hpe.com>; users at dpdk.org; dts at dpdk.org; 
> > test-report at dpdk.org
> > Cc: Zhang, Roy Fan <roy.fan.zhang at intel.com>; De Lara Guarch, Pablo 
> > <pablo.de.lara.guarch at intel.com>
> > Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hi Sanjib,
> >
> > Copying Pablo who added unit tests for it in this commit - this 
> > should give you an example of how to get it working:
> > 77a217a19bb72860e26b9aefb19dce92239e0820
> >
> > Also copying Fan who added CCM to aesni_mb PMD.
> >
> > Fiona
> >
> > > -----Original Message-----
> > > From: users [mailto:users-bounces at dpdk.org] On Behalf Of DAS, 
> > > SANJIB
> > > Sent: Wednesday, May 2, 2018 3:21 PM
> > > To: users at dpdk.org; dts at dpdk.org; test-report at dpdk.org
> > > Cc: DAS, SANJIB <sanjib.das at hpe.com>
> > > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm 
> > > CCM
> > >
> > > Hello team,
> > >
> > > I am currently executing performance testing using ipsec-secgw 
> > > application for different crypto
> > algorithms.
> > > I was able to execute the tests for crypto algorithms CBC & GCM, 
> > > but as such dint find much pointers on CCM.  From ipsec-secgw 
> > > sample application source code (DPDK-18.02.1) also it looks CCM 
> > > support is not there. Could you kindly share your comments on 
> > > that. Can we actually execute ipsec-secgw
> > application for crypto algorithm CCM?
> > >
> >
> > > Thanks,
> > > Sanjib
> > >
> > > my page-0
> > > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_w
> > > ik
> > > i_
> > > space>
> > >
> > >
> > >
> >
>