summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/ipsec_sa.h
AgeCommit message (Expand)AuthorFilesLines
2023-08-08ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMACBenoît Ganne1-2/+11
2023-06-23ipsec: manually binding an SA to a workerMaxime Peim1-0/+1
2023-03-23ipsec: make pre-shared keys harder to misuseBenoît Ganne1-57/+34
2023-03-23ipsec: add per-SA error countersArthur de Kerhor1-1/+30
2023-02-08ipsec: fix AES CBC IV generation (CVE-2022-46397)Benoît Ganne1-1/+1
2022-12-16ipsec: new api for sa ips and ports updatesArthur de Kerhor1-0/+2
2022-09-14ipsec: make chacha20-poly1305 available via APIVladimir Ratnikov1-13/+17
2021-11-19fib: Don't use [midchain] adjacencies to change an interface's feature arcNeale Ranns1-1/+2
2021-09-29ipsec: Record the number of packets lost from an SANeale Ranns1-14/+52
2021-06-29ipsec: Fix setting the hi-sequence number for decryptNeale Ranns1-46/+132
2021-03-05ipsec: Support async mode per-SANeale Ranns1-1/+2
2021-02-26ipsec: move the IPSec SA pool out of ipsec_mainNeale Ranns1-0/+12
2021-02-12ipsec: Store thread-index in buffer meta-data during SA handoffNeale Ranns1-0/+8
2021-02-10ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-23/+8
2021-02-09Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy"Matthew Smith1-8/+23
2021-02-08ipsec: Use the new tunnel API types to add flow label and TTL copyNeale Ranns1-23/+8
2021-02-05ipsec: add support for AES CTRBenoît Ganne1-16/+25
2021-02-04ipsec: one thread index per-SANeale Ranns1-2/+2
2020-11-02ipsec: Tunnel SA DSCP behaviourNeale Ranns1-1/+6
2020-10-19ipsec: Layout and prefetching of SA structNeale Ranns1-26/+34
2020-09-07ipsec: fix padding/alignment for native IPsec encryptionChristian Hopps1-1/+1
2020-05-05ipsec: User can choose the UDP source portNeale Ranns1-1/+1
2020-04-30crypto: introduce async crypto infraFan Zhang1-3/+43
2020-03-21ikev2: add support for custom ipsec-over-udp portFilip Tehlar1-1/+4
2019-12-17ipsec: bind an SA to a workerNeale Ranns1-0/+14
2019-11-08ipsec: remove dedicated IPSec tunnelsNeale Ranns1-0/+1
2019-07-31ipsec: Typo in flag nameNeale Ranns1-1/+1
2019-07-24ipsec: GCM, Anti-replay and ESN fixessNeale Ranns1-26/+103
2019-07-12ipsec: Reference count the SAsNeale Ranns1-18/+16
2019-06-18ipsec: ipsec-tun protectNeale Ranns1-1/+9
2019-06-17ipsec: One DPO per SANeale Ranns1-4/+1
2019-06-07ipsec: remove the set_key APINeale Ranns1-2/+0
2019-05-14IPSEC: remove unecessary pass by reference of sequence numberNeale Ranns1-2/+2
2019-04-26crypto, ipsec: change GCM IV handlingDamjan Marion1-0/+1
2019-04-25IPSEC; dpdk backend for tunnel interface encryptionNeale Ranns1-1/+0
2019-04-25crypto: improve key handlingDamjan Marion1-3/+7
2019-04-17IPSEC: Pass the algorithm salt (used in GCM) over the APINeale Ranns1-2/+2
2019-04-16IPSEC: support GCM in ESPNeale Ranns1-0/+7
2019-04-07crypto: add support for AEAD and AES-GCMDamjan Marion1-3/+3
2019-04-04ipsec: trunc_size -> icv_sizeDamjan Marion1-1/+1
2019-04-02IPSEC: tunnel scaling - don't stack the inbould SANeale Ranns1-0/+1
2019-03-29IPSEC-GRE: fixes and API update to common types.Neale Ranns1-0/+1
2019-03-28ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESNDamjan Marion1-3/+3
2019-03-28ipsec: anti-replay code cleanupDamjan Marion1-1/+129
2019-03-27ipsec: compress ipsec_sa_t so data used by dataplane code fits in cachelineDamjan Marion1-23/+51
2019-03-26ipsec: esp-encrypt reworkDamjan Marion1-0/+3
2019-03-20ipsec: keep crypto data inside SADamjan Marion1-0/+10
2019-02-18IPSEC: move SA counters into the stats segmentNeale Ranns1-3/+7
2019-02-13IPSEC: restack SAs on backend changeNeale Ranns1-0/+4
2019-02-07IPSEC: no second lookup after tunnel encapNeale Ranns1-7/+61