Code Review
/
vpp.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
ipsec: add support for AES CTR
[vpp.git]
/
src
/
vnet
/
ipsec
/
esp.h
diff --git
a/src/vnet/ipsec/esp.h
b/src/vnet/ipsec/esp.h
index
d24b5ea
..
51386e6
100644
(file)
--- a/
src/vnet/ipsec/esp.h
+++ b/
src/vnet/ipsec/esp.h
@@
-58,6
+58,18
@@
typedef CLIB_PACKED (struct {
}) ip6_and_esp_header_t;
/* *INDENT-ON* */
}) ip6_and_esp_header_t;
/* *INDENT-ON* */
+/**
+ * AES counter mode nonce
+ */
+typedef struct
+{
+ u32 salt;
+ u64 iv;
+ u32 ctr; /* counter: 1 in big-endian for ctr, unused for gcm */
+} __clib_packed esp_ctr_nonce_t;
+
+STATIC_ASSERT_SIZEOF (esp_ctr_nonce_t, 16);
+
/**
* AES GCM Additional Authentication data
*/
/**
* AES GCM Additional Authentication data
*/
@@
-196,6
+208,7
@@
typedef struct
} esp_decrypt_packet_data_t;
STATIC_ASSERT_SIZEOF (esp_decrypt_packet_data_t, 3 * sizeof (u64));
} esp_decrypt_packet_data_t;
STATIC_ASSERT_SIZEOF (esp_decrypt_packet_data_t, 3 * sizeof (u64));
+STATIC_ASSERT_OFFSET_OF (esp_decrypt_packet_data_t, seq, sizeof (u64));
/* we are forced to store the decrypt post data into 2 separate places -
vlib_opaque and opaque2. */
/* we are forced to store the decrypt post data into 2 separate places -
vlib_opaque and opaque2. */