aboutsummaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec
AgeCommit message (Expand)AuthorFilesLines
2019-04-30crypto: enforce per-alg crypto key lengthBenoît Ganne1-0/+5
2019-04-26crypto, ipsec: change GCM IV handlingDamjan Marion2-3/+21
2019-04-25crypto: AES GCM IV length is always 12Damjan Marion1-1/+0
2019-04-25crypto_ipsecmb: use pre-expanded keysDamjan Marion1-1/+1
2019-04-25IPSEC; dpdk backend for tunnel interface encryptionNeale Ranns7-56/+92
2019-04-25ipsec: drop runts in esp-decryptDamjan Marion1-0/+8
2019-04-25crypto: improve key handlingDamjan Marion8-11/+58
2019-04-24Rearrange prefetching in ipsec_output_inlineVratko Polak1-6/+6
2019-04-23Fix a ipsec command line typoSimon Zhang1-1/+1
2019-04-23ipsec4-output: add pkt header and data prefetchingZhiyong Yang1-2/+9
2019-04-19IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654)Neale Ranns1-7/+14
2019-04-19IPSEC: ESP IPv6 transport mode payload length incorrect (VPP-1653)Neale Ranns1-1/+3
2019-04-18IPSEC: tunnel rekey fix and test (VPP-1652)Neale Ranns1-21/+24
2019-04-17IPSEC: Pass the algorithm salt (used in GCM) over the APINeale Ranns6-10/+16
2019-04-16IPSEC: SA format; don't print keys when there's no algoNeale Ranns1-7/+8
2019-04-16IPSEC: support GCM in ESPNeale Ranns12-12/+126
2019-04-15IPSEC: crypto overflowNeale Ranns1-1/+1
2019-04-11IPSEC: ESP with ESN tests and fixesNeale Ranns2-4/+4
2019-04-11IPSEC-MB: Use random & non-repeating IV (VPP-1642)Neale Ranns2-5/+1
2019-04-10crypto: Intel IPSEC-MB engineNeale Ranns2-2/+13
2019-04-10IPSEC: for each engine and algorithm testsNeale Ranns1-1/+1
2019-04-10IPSEC: remove double byte swap of IP addressesNeale Ranns1-18/+10
2019-04-08IPSEC TEST: various hash alogrithmsNeale Ranns1-1/+1
2019-04-07crypto: add support for AEAD and AES-GCMDamjan Marion7-41/+39
2019-04-05IPSEC: punt reasons; SPI=0, no-tunnelNeale Ranns4-13/+154
2019-04-04ipsec: trunc_size -> icv_sizeDamjan Marion9-15/+15
2019-04-03IPSEC: correctly size per-thread dataNeale Ranns1-1/+1
2019-04-03IPSEC: show CLI improvementsNeale Ranns4-31/+208
2019-04-02IPSEC: tunnel scaling - don't stack the inbould SANeale Ranns4-19/+15
2019-04-02IPSEC: remove pointless feature orderingNeale Ranns1-4/+2
2019-03-29IPSEC-GRE: fixes and API update to common types.Neale Ranns10-52/+57
2019-03-29ipsec: esp-decrypt reworkDamjan Marion3-199/+299
2019-03-29IPSEC: tunnel fragmentationNeale Ranns2-0/+13
2019-03-28crypto: add vnet_crypto_op_init (...)Damjan Marion3-6/+4
2019-03-28ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESNDamjan Marion8-14/+14
2019-03-28ipsec: anti-replay code cleanupDamjan Marion4-171/+143
2019-03-28IPSEC: 4o6 and 6o4 for tunnel interfacesNeale Ranns1-2/+4
2019-03-28IPSEC: fix build breakage from ships in the night mergesNeale Ranns1-2/+6
2019-03-28IPSEC: run encrpyt as a feautre on the tunnelNeale Ranns3-125/+178
2019-03-27ipsec: compress ipsec_sa_t so data used by dataplane code fits in cachelineDamjan Marion11-91/+129
2019-03-26IPSEC: more expressive API errorsNeale Ranns2-7/+7
2019-03-26ipsec: esp-encrypt reworkDamjan Marion6-242/+397
2019-03-26IPSEC: improved policy deleteNeale Ranns1-13/+9
2019-03-25IPSEC tests fnd fix or Extended Sequence NumbersNeale Ranns3-15/+14
2019-03-22ipsec: fix esn handlingDamjan Marion1-9/+5
2019-03-22IPSEC: test for packet drop on sequence number wrapNeale Ranns1-1/+2
2019-03-21ipsec: add ipv6 support for ipsec tunnel interfaceKingwel Xie7-147/+415
2019-03-20crypto: add hmac truncate optionDamjan Marion1-0/+1
2019-03-20IPSEC: Tunnel SA not deletedNeale Ranns1-3/+6
2019-03-20ipsec: keep crypto data inside SADamjan Marion8-58/+65