aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/esp_decrypt.c
AgeCommit message (Expand)AuthorFilesLines
2023-12-12ipsec: allow receiving encrypted IP packets with TFC paddingArthur de Kerhor1-4/+42
2023-10-30ipsec: huge anti-replay window supportMaxime Peim1-16/+43
2023-09-07ipsec: clear L4-cksum flags when decap'ing packetsFrédéric Perrin1-1/+3
2023-08-08ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMACBenoît Ganne1-0/+12
2023-06-08crypto: use fixed crypto frame poolgaoginskx1-0/+9
2023-05-29ipsec: fix ipsec_set_next_index set with wrong sa index when async frame comm...Xiaoming Jiang1-1/+1
2023-03-23ipsec: make pre-shared keys harder to misuseBenoît Ganne1-5/+2
2023-03-23ipsec: add per-SA error countersArthur de Kerhor1-35/+51
2022-11-18ipsec: Failure at the start of the batch should not invalidate the rest of th...Neale Ranns1-1/+1
2022-10-12misc: fix issues reported by clang-15Damjan Marion1-2/+1
2022-08-11ipsec: Use .api declared error countersNeale Ranns1-45/+19
2022-05-03ipsec: support per next-header next-nodesBenoît Ganne1-36/+44
2021-12-04ipsec: fix async buffer leakMatthew Smith1-1/+1
2021-09-29ipsec: Record the number of packets lost from an SANeale Ranns1-5/+14
2021-07-15misc: replace CLIB_PREFETCH with clib_prefetch_{load,store}Damjan Marion1-3/+3
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns1-65/+70
2021-06-08ipsec: fix async crypto frame leakMatthew Smith1-34/+31
2021-06-04ipsec: fix crypto ops in esp decryptBenoît Ganne1-2/+7
2021-04-07crypto: fix ops flags in crypto sw schedulerBenoît Ganne1-0/+2
2021-03-05ipsec: Support async mode per-SANeale Ranns1-85/+94
2021-03-05ipsec: Submit fuller async framesNeale Ranns1-60/+58
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns1-7/+5
2021-02-25tests: Add tests for IPSec async mode using the crypto SW schedulerNeale Ranns1-1/+2
2021-02-25ipsec: ipsec.h tidy upNeale Ranns1-0/+23
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns1-0/+1
2021-02-05ipsec: add support for AES CTRBenoît Ganne1-52/+42
2021-02-04ipsec: one thread index per-SANeale Ranns1-3/+3
2021-01-18ipsec: Support MPLS over IPSec[46] interfaceNeale Ranns1-11/+24
2020-12-18ipsec: fixed esp_decrypt pkt len after icv movedPiotrX Kleski1-6/+11
2020-12-01ipsec: change predictionFan Zhang1-1/+1
2020-11-26gre: Move to new API generated types/messagesNeale Ranns1-1/+1
2020-10-24ipsec: remove pending nodeFan Zhang1-46/+33
2020-10-19ipsec: Layout and prefetching of SA structNeale Ranns1-0/+3
2020-09-04ipsec: fix trace of GRE_teb packetsChristian Hopps1-2/+5
2020-04-30crypto: introduce async crypto infraFan Zhang1-558/+1015
2020-04-28ipsec: fix buffer allocFilip Tehlar1-1/+7
2020-03-31ipsec: fix chained ESPFilip Tehlar1-36/+120
2020-03-23ipsec: Revert "ipsec: fix chained ESP"Florin Coras1-119/+36
2020-03-23ipsec: fix chained ESPFilip Tehlar1-36/+119
2020-03-21ipsec: efficient layout of ESP per thread dataRajesh Goel1-3/+4
2020-02-11ipsec: add support for chained buffersFilip Tehlar1-75/+369
2020-02-05ipsec: set l2_len for GRE-TEB tunnel decapJohn Lo1-0/+2
2020-01-04ipsec: Targeted unit testingNeale Ranns1-7/+22
2019-12-23ipsec: Test and fix IPSec worker hand-offNeale Ranns1-2/+2
2019-12-18ipsec: Fix decap of IPSEC/GRE in transport modeNeale Ranns1-6/+44
2019-12-17ipsec: bind an SA to a workerNeale Ranns1-9/+39
2019-11-08ipsec: remove dedicated IPSec tunnelsNeale Ranns1-20/+14
2019-08-01ipsec: Redo the anit-replay check post decryptNeale Ranns1-0/+29
2019-07-24ipsec: GCM, Anti-replay and ESN fixessNeale Ranns1-11/+18
2019-06-18ipsec: ipsec-tun protectNeale Ranns1-18/+102