summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/esp_encrypt.c
AgeCommit message (Expand)AuthorFilesLines
2023-08-08ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMACBenoît Ganne1-0/+12
2023-07-21ipsec: fix logic in ext_hdr_is_pre_espPiotr Bronowski1-3/+3
2023-06-08crypto: use fixed crypto frame poolgaoginskx1-0/+10
2023-05-29ipsec: fix ipsec_set_next_index set with wrong sa index when async frame comm...Xiaoming Jiang1-1/+1
2023-03-23ipsec: make pre-shared keys harder to misuseBenoît Ganne1-11/+9
2023-03-23ipsec: add per-SA error countersArthur de Kerhor1-24/+38
2023-02-08ipsec: fix AES CBC IV generation (CVE-2022-46397)Benoît Ganne1-26/+62
2022-10-12misc: fix issues reported by clang-15Damjan Marion1-4/+2
2022-08-19ipsec: enable UDP encap for IPv6 ESP tun protectMatthew Smith1-13/+11
2022-08-11ipsec: Use .api declared error countersNeale Ranns1-45/+23
2022-03-10ipsec: remove the redundant codeMohsin Kazmi1-1/+0
2021-12-04ipsec: fix async buffer leakMatthew Smith1-1/+1
2021-12-03ip: extension header parsing fails for fragment headerOle Troan1-3/+14
2021-11-19fib: Don't use [midchain] adjacencies to change an interface's feature arcNeale Ranns1-125/+37
2021-10-31ipsec: silence gcc-11 parentheses warningDamjan Marion1-1/+1
2021-07-15misc: replace CLIB_PREFETCH with clib_prefetch_{load,store}Damjan Marion1-3/+3
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns1-8/+8
2021-06-15ipsec: fix length check when adding footer+icvBenoît Ganne1-1/+2
2021-06-08ipsec: fix async crypto frame leakMatthew Smith1-20/+19
2021-03-05ipsec: Support async mode per-SANeale Ranns1-85/+96
2021-03-05ipsec: Submit fuller async framesNeale Ranns1-65/+58
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns1-1/+1
2021-02-25ipsec: ipsec.h tidy upNeale Ranns1-0/+25
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns1-0/+1
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-0/+1
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith1-1/+0
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-0/+1
2021-02-08tunnel: support copying TTL and flow label from inner to outerNeale Ranns1-5/+4
2021-02-05ipsec: add support for AES CTRBenoît Ganne1-71/+76
2021-02-04ipsec: one thread index per-SANeale Ranns1-3/+3
2021-01-21ipsec: Tunnelled packets are locally generatedNeale Ranns1-0/+1
2021-01-18ipsec: Support MPLS over IPSec[46] interfaceNeale Ranns1-37/+114
2020-12-01ipsec: change predictionFan Zhang1-1/+1
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns1-6/+33
2020-10-24ipsec: remove pending nodeFan Zhang1-58/+54
2020-10-21misc: minimize dependencies on udp.hFlorin Coras1-1/+0
2020-10-19ipsec: Layout and prefetching of SA structNeale Ranns1-0/+7
2020-09-07ipsec: fix padding/alignment for native IPsec encryptionChristian Hopps1-6/+6
2020-08-20ipsec: fix esp paddingMilan Lenco1-1/+1
2020-05-24ipsec: fixed chaining ops after add footer and icvPiotrX Kleski1-8/+11
2020-05-13ipsec: Support 4o6 and 6o4 for SPD tunnel mode SAsNeale Ranns1-34/+42
2020-05-04fib: midchain adjacency optimisationsNeale Ranns1-68/+11
2020-04-30crypto: introduce async crypto infraFan Zhang1-134/+537
2020-03-31ipsec: fix chained ESPFilip Tehlar1-14/+25
2020-03-31ipsec: fix udp-encap in transport modeAlexander Chernavin1-1/+7
2020-03-23ipsec: Revert "ipsec: fix chained ESP"Florin Coras1-25/+14
2020-03-23ipsec: fix chained ESPFilip Tehlar1-14/+25
2020-02-25feature: provide a u16 version of vnet_feature_nextNeale Ranns1-3/+1
2020-02-21ipsec: IPSec protection for multi-point tunnel interfacesNeale Ranns1-5/+6
2020-02-11ipsec: add support for chained buffersFilip Tehlar1-22/+161