mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-08-20 06:20:41 +00:00
57f273adbc
A new metadata type and config structure are introduced to interact with firmware to support ipsec offloading. This feature relies on specific firmware that supports ipsec encrypt/decrypt by advertising related capability bit. The xfrm callbacks which interact with upper layer are implemented in the following patch. Based on initial work of Norm Bagley <norman.bagley@netronome.com>. Signed-off-by: Huanhuan Wang <huanhuan.wang@corigine.com> Reviewed-by: Louis Peens <louis.peens@corigine.com> Signed-off-by: Simon Horman <simon.horman@corigine.com> Reviewed-by: Leon Romanovsky <leonro@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net>
65 lines
1.4 KiB
C
65 lines
1.4 KiB
C
/* SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause) */
|
|
/* Copyright (C) 2019 Netronome Systems, Inc. */
|
|
|
|
#ifndef NFP_CRYPTO_H
|
|
#define NFP_CRYPTO_H 1
|
|
|
|
struct net_device;
|
|
struct nfp_net;
|
|
struct nfp_net_tls_resync_req;
|
|
|
|
struct nfp_net_tls_offload_ctx {
|
|
__be32 fw_handle[2];
|
|
|
|
u8 rx_end[0];
|
|
/* Tx only fields follow - Rx side does not have enough driver state
|
|
* to fit these
|
|
*/
|
|
|
|
u32 next_seq;
|
|
};
|
|
|
|
#ifdef CONFIG_TLS_DEVICE
|
|
int nfp_net_tls_init(struct nfp_net *nn);
|
|
int nfp_net_tls_rx_resync_req(struct net_device *netdev,
|
|
struct nfp_net_tls_resync_req *req,
|
|
void *pkt, unsigned int pkt_len);
|
|
#else
|
|
static inline int nfp_net_tls_init(struct nfp_net *nn)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static inline int
|
|
nfp_net_tls_rx_resync_req(struct net_device *netdev,
|
|
struct nfp_net_tls_resync_req *req,
|
|
void *pkt, unsigned int pkt_len)
|
|
{
|
|
return -EOPNOTSUPP;
|
|
}
|
|
#endif
|
|
|
|
/* IPsec related structures and functions */
|
|
struct nfp_ipsec_offload {
|
|
u32 seq_hi;
|
|
u32 seq_low;
|
|
u32 handle;
|
|
};
|
|
|
|
#ifndef CONFIG_NFP_NET_IPSEC
|
|
static inline void nfp_net_ipsec_init(struct nfp_net *nn)
|
|
{
|
|
}
|
|
|
|
static inline void nfp_net_ipsec_clean(struct nfp_net *nn)
|
|
{
|
|
}
|
|
#else
|
|
void nfp_net_ipsec_init(struct nfp_net *nn);
|
|
void nfp_net_ipsec_clean(struct nfp_net *nn);
|
|
bool nfp_net_ipsec_tx_prep(struct nfp_net_dp *dp, struct sk_buff *skb,
|
|
struct nfp_ipsec_offload *offload_info);
|
|
int nfp_net_ipsec_rx(struct nfp_meta_parsed *meta, struct sk_buff *skb);
|
|
#endif
|
|
|
|
#endif
|