aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/esp_encrypt.c
AgeCommit message (Expand)AuthorFilesLines
2024-06-25ipsec: enable ipv6 udp checksum offloadJeff Shaw1-0/+33
2024-06-12ipsec: Add option to configure the hand-off worker queue sizeDau Do1-10/+10
2024-03-21ip: add support for buffer offload metadata in ip midchainArthur de Kerhor1-4/+7
2024-03-21ipsec: remove unused parameter for esp_add_footer_and_icvFan Zhang1-4/+3
2024-03-12misc: remove GNU Indent directivesDamjan Marion1-15/+0
2024-02-19ipsec: check each packet for no algs in esp-encryptMatthew Smith1-10/+13
2023-11-17ipsec: keep esp encrypt pointer and index syncedMatthew Smith1-1/+1
2023-08-08ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMACBenoît Ganne1-0/+12
2023-07-21ipsec: fix logic in ext_hdr_is_pre_espPiotr Bronowski1-3/+3
2023-06-08crypto: use fixed crypto frame poolgaoginskx1-0/+10
2023-05-29ipsec: fix ipsec_set_next_index set with wrong sa index when async frame comm...Xiaoming Jiang1-1/+1
2023-03-23ipsec: make pre-shared keys harder to misuseBenoît Ganne1-11/+9
2023-03-23ipsec: add per-SA error countersArthur de Kerhor1-24/+38
2023-02-08ipsec: fix AES CBC IV generation (CVE-2022-46397)Benoît Ganne1-26/+62
2022-10-12misc: fix issues reported by clang-15Damjan Marion1-4/+2
2022-08-19ipsec: enable UDP encap for IPv6 ESP tun protectMatthew Smith1-13/+11
2022-08-11ipsec: Use .api declared error countersNeale Ranns1-45/+23
2022-03-10ipsec: remove the redundant codeMohsin Kazmi1-1/+0
2021-12-04ipsec: fix async buffer leakMatthew Smith1-1/+1
2021-12-03ip: extension header parsing fails for fragment headerOle Troan1-3/+14
2021-11-19fib: Don't use [midchain] adjacencies to change an interface's feature arcNeale Ranns1-125/+37
2021-10-31ipsec: silence gcc-11 parentheses warningDamjan Marion1-1/+1
2021-07-15misc: replace CLIB_PREFETCH with clib_prefetch_{load,store}Damjan Marion1-3/+3
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns1-8/+8
2021-06-15ipsec: fix length check when adding footer+icvBenoît Ganne1-1/+2
2021-06-08ipsec: fix async crypto frame leakMatthew Smith1-20/+19
2021-03-05ipsec: Support async mode per-SANeale Ranns1-85/+96
2021-03-05ipsec: Submit fuller async framesNeale Ranns1-65/+58
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns1-1/+1
2021-02-25ipsec: ipsec.h tidy upNeale Ranns1-0/+25
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns1-0/+1
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-0/+1
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith1-1/+0
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-0/+1
2021-02-08tunnel: support copying TTL and flow label from inner to outerNeale Ranns1-5/+4
2021-02-05ipsec: add support for AES CTRBenoît Ganne1-71/+76
2021-02-04ipsec: one thread index per-SANeale Ranns1-3/+3
2021-01-21ipsec: Tunnelled packets are locally generatedNeale Ranns1-0/+1
2021-01-18ipsec: Support MPLS over IPSec[46] interfaceNeale Ranns1-37/+114
2020-12-01ipsec: change predictionFan Zhang1-1/+1
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns1-6/+33
2020-10-24ipsec: remove pending nodeFan Zhang1-58/+54
2020-10-21misc: minimize dependencies on udp.hFlorin Coras1-1/+0
2020-10-19ipsec: Layout and prefetching of SA structNeale Ranns1-0/+7
2020-09-07ipsec: fix padding/alignment for native IPsec encryptionChristian Hopps1-6/+6
2020-08-20ipsec: fix esp paddingMilan Lenco1-1/+1
2020-05-24ipsec: fixed chaining ops after add footer and icvPiotrX Kleski1-8/+11
2020-05-13ipsec: Support 4o6 and 6o4 for SPD tunnel mode SAsNeale Ranns1-34/+42
2020-05-04fib: midchain adjacency optimisationsNeale Ranns1-68/+11
2020-04-30crypto: introduce async crypto infraFan Zhang1-134/+537