From mboxrd@z Thu Jan 1 00:00:00 1970 From: "De Lara Guarch, Pablo" Subject: Re: [PATCH v2] cryptodev: enable BPI for Cablelabs DOCSIS security spec Date: Mon, 6 Mar 2017 16:47:05 +0000 Message-ID: References: <1484751890-9716-1-git-send-email-fiona.trahe@intel.com> <1487858575-140430-1-git-send-email-pablo.de.lara.guarch@intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Cc: "dev@dpdk.org" To: "Doherty, Declan" , "Trahe, Fiona" Return-path: Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) by dpdk.org (Postfix) with ESMTP id 0B384FA39 for ; Mon, 6 Mar 2017 17:47:16 +0100 (CET) In-Reply-To: <1487858575-140430-1-git-send-email-pablo.de.lara.guarch@intel.com> Content-Language: en-US List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" > -----Original Message----- > From: De Lara Guarch, Pablo > Sent: Thursday, February 23, 2017 2:03 PM > To: Doherty, Declan; Trahe, Fiona > Cc: dev@dpdk.org; De Lara Guarch, Pablo > Subject: [PATCH v2] cryptodev: enable BPI for Cablelabs DOCSIS security > spec >=20 > Extend the DPDK cryptodev API to enable processing of packets according > to the Baseline Privacy Interface Plus (BPI+) Specification described in > the security specification of the Cablelabs Data-over-Cable Service > Interface Specification (DOCSIS). >=20 > Brief summary of BPI+ symmetric cryptography requirements: > BPI+ cryptography uses a block cipher (AES-CBC/DES-CBC) to > encrypt/decrypt > all the whole blocks in the packet. However the data length is not always > a block-multiple, so where there is a final block less than the full bloc= k > size this residual block requires special handling using AES-CFB/DES-CFB > mode. Similar special handling is specified where there is only one block= , > smaller than the block size for the cipher. See spec for further details. > https://apps.cablelabs.com/specification/docsis-3-1-security-specificatio= n/ >=20 > Two new elements are added to the enum rte_crypto_cipher_algorithm. > Note elements of this enum are actually a combination of an algorithm > (AES, > 3DES, etc) and mode (CBC, CTR, etc). The new DOCSISBPI mode is used to > convey to the PMD that the mode applied should be the specific > combination > of CBC and CFB required by the DOCSIS Baseline Privacy Plus Spec. >=20 > Signed-off-by: Fiona Trahe > Signed-off-by: Pablo de Lara Applied to dpdk-next-crypto. Thanks, Pablo