summary |
shortlog |
log |
commit | commitdiff |
review |
tree
raw |
patch |
inline | side by side (from parent 1:
085637f)
Change-Id: Idb661261c2191adda963a7815822fd7a27a9e7a0
Signed-off-by: Damjan Marion <damarion@cisco.com>
(&ipsec_sa_counters, thread_index, sa_index0,
1, i_b0->current_length);
(&ipsec_sa_counters, thread_index, sa_index0,
1, i_b0->current_length);
- icv_size = sa0->integ_trunc_size;
+ icv_size = sa0->integ_icv_size;
if (PREDICT_TRUE (sa0->integ_alg != IPSEC_INTEG_ALG_NONE))
{
u8 sig[64];
if (PREDICT_TRUE (sa0->integ_alg != IPSEC_INTEG_ALG_NONE))
{
u8 sig[64];
adv = -sizeof (ah_header_t);
}
adv = -sizeof (ah_header_t);
}
- icv_size = sa0->integ_trunc_size;
+ icv_size = sa0->integ_icv_size;
const u8 padding_len = ah_calc_icv_padding_len (icv_size, is_ip6);
adv -= padding_len;
/* transport mode save the eth header before it is overwritten */
const u8 padding_len = ah_calc_icv_padding_len (icv_size, is_ip6);
adv -= padding_len;
/* transport mode save the eth header before it is overwritten */
op->src = data;
op->len = data_len;
op->dst = signature;
op->src = data;
op->len = data_len;
op->dst = signature;
- op->hmac_trunc_len = sa->integ_trunc_size;
+ op->hmac_trunc_len = sa->integ_icv_size;
if (ipsec_sa_is_set_USE_ESN (sa))
{
if (ipsec_sa_is_set_USE_ESN (sa))
{
}
vnet_crypto_process_ops (vm, op, 1);
}
vnet_crypto_process_ops (vm, op, 1);
- return sa->integ_trunc_size;
+ return sa->integ_icv_size;
{
current_sa_index = vnet_buffer (b[0])->ipsec.sad_index;
sa0 = pool_elt_at_index (im->sad, current_sa_index);
{
current_sa_index = vnet_buffer (b[0])->ipsec.sad_index;
sa0 = pool_elt_at_index (im->sad, current_sa_index);
- cpd.icv_sz = sa0->integ_trunc_size;
+ cpd.icv_sz = sa0->integ_icv_size;
cpd.iv_sz = sa0->crypto_iv_size;
cpd.flags = sa0->flags;
cpd.sa_index = current_sa_index;
cpd.iv_sz = sa0->crypto_iv_size;
cpd.flags = sa0->flags;
cpd.sa_index = current_sa_index;
current_sa_packets = current_sa_bytes = 0;
spi = clib_net_to_host_u32 (sa0->spi);
block_sz = sa0->crypto_block_size;
current_sa_packets = current_sa_bytes = 0;
spi = clib_net_to_host_u32 (sa0->spi);
block_sz = sa0->crypto_block_size;
- icv_sz = sa0->integ_trunc_size;
+ icv_sz = sa0->integ_icv_size;
iv_sz = sa0->crypto_iv_size;
}
iv_sz = sa0->crypto_iv_size;
}
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA1_96];
i->op_type = VNET_CRYPTO_OP_SHA1_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA1_96];
i->op_type = VNET_CRYPTO_OP_SHA1_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_256_96];
i->op_type = VNET_CRYPTO_OP_SHA1_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_256_96];
i->op_type = VNET_CRYPTO_OP_SHA1_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_256_128];
i->op_type = VNET_CRYPTO_OP_SHA256_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_256_128];
i->op_type = VNET_CRYPTO_OP_SHA256_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_384_192];
i->op_type = VNET_CRYPTO_OP_SHA384_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_384_192];
i->op_type = VNET_CRYPTO_OP_SHA384_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_512_256];
i->op_type = VNET_CRYPTO_OP_SHA512_HMAC;
i = &im->integ_algs[IPSEC_INTEG_ALG_SHA_512_256];
i->op_type = VNET_CRYPTO_OP_SHA512_HMAC;
vec_validate_aligned (im->ptd, vlib_num_workers (), CLIB_CACHE_LINE_BYTES);
vec_validate_aligned (im->ptd, vlib_num_workers (), CLIB_CACHE_LINE_BYTES);
typedef struct
{
vnet_crypto_op_type_t op_type;
typedef struct
{
vnet_crypto_op_type_t op_type;
} ipsec_main_integ_alg_t;
typedef struct
} ipsec_main_integ_alg_t;
typedef struct
{
ipsec_main_t *im = &ipsec_main;
sa->integ_alg = integ_alg;
{
ipsec_main_t *im = &ipsec_main;
sa->integ_alg = integ_alg;
- sa->integ_trunc_size = im->integ_algs[integ_alg].trunc_size;
+ sa->integ_icv_size = im->integ_algs[integ_alg].icv_size;
sa->integ_op_type = im->integ_algs[integ_alg].op_type;
sa->integ_op_type = im->integ_algs[integ_alg].op_type;
- ASSERT (sa->integ_trunc_size <= ESP_MAX_ICV_SIZE);
+ ASSERT (sa->integ_icv_size <= ESP_MAX_ICV_SIZE);
u8 crypto_iv_size;
u8 crypto_block_size;
u8 crypto_iv_size;
u8 crypto_block_size;
u32 spi;
u32 seq;
u32 seq_hi;
u32 spi;
u32 seq;
u32 seq_hi;