Gitiles
Code Review Sign In
gerrit.nordix.org / fdio / vpp / 03b7ac929e7e41c67de0426d2a9e005b8bc5d963 / src / vnet / ipsec / esp_encrypt.c
  1. ff71939 ipsec: check each packet for no algs in esp-encrypt by Matthew Smith · 10 months ago
  2. dac9e56 ipsec: keep esp encrypt pointer and index synced by Matthew Smith · 1 year, 1 month ago
  3. 84e6658 ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMAC by Benoît Ganne · 1 year, 10 months ago
  4. 3a6bc6f ipsec: fix logic in ext_hdr_is_pre_esp by Piotr Bronowski · 1 year, 10 months ago
  5. f441b5d crypto: use fixed crypto frame pool by gaoginskx · 3 years, 7 months ago
  6. 0c1454c ipsec: fix ipsec_set_next_index set with wrong sa index when async frame commit failed by Xiaoming Jiang · 1 year, 8 months ago
  7. 5527a78 ipsec: make pre-shared keys harder to misuse by Benoît Ganne · 3 years ago
  8. ad95b06 ipsec: add per-SA error counters by Arthur de Kerhor · 2 years, 1 month ago
  9. 02dfd29 ipsec: fix AES CBC IV generation (CVE-2022-46397) by Benoît Ganne · 3 years ago
  10. dd298e8 misc: fix issues reported by clang-15 by Damjan Marion · 2 years, 2 months ago
  11. 6f1eb48 ipsec: enable UDP encap for IPv6 ESP tun protect by Matthew Smith · 2 years, 5 months ago
  12. 93688d7 ipsec: Use .api declared error counters by Neale Ranns · 2 years, 5 months ago
  13. 562cfa4 ipsec: remove the redundant code by Mohsin Kazmi · 2 years, 10 months ago
  14. c14b8cf ipsec: fix async buffer leak by Matthew Smith · 3 years, 1 month ago
  15. 03092c1 ip: extension header parsing fails for fragment header by Ole Troan · 3 years, 1 month ago
  16. 6fdcc3d fib: Don't use [midchain] adjacencies to change an interface's feature arc by Neale Ranns · 3 years, 3 months ago
  17. d0b2660 ipsec: silence gcc-11 parentheses warning by Damjan Marion · 3 years, 2 months ago
  18. af7fb04 misc: replace CLIB_PREFETCH with clib_prefetch_{load,store} by Damjan Marion · 3 years, 5 months ago
  19. 5b89110 ipsec: Fix setting the hi-sequence number for decrypt by Neale Ranns · 3 years, 6 months ago
  20. 217ba5a ipsec: fix length check when adding footer+icv by Benoît Ganne · 3 years, 6 months ago
  21. 51d56ba ipsec: fix async crypto frame leak by Matthew Smith · 3 years, 7 months ago
  22. f16e9a5 ipsec: Support async mode per-SA by Neale Ranns · 3 years, 10 months ago
  23. fc81134 ipsec: Submit fuller async frames by Neale Ranns · 3 years, 10 months ago
  24. c5fe57d ipsec: move the IPSec SA pool out of ipsec_main by Neale Ranns · 3 years, 10 months ago
  25. 2d49830 ipsec: ipsec.h tidy up by Neale Ranns · 3 years, 10 months ago
  26. aa7d766 ipsec: Store thread-index in buffer meta-data during SA handoff by Neale Ranns · 3 years, 11 months ago
  27. 9ec846c ipsec: Use the new tunnel API types to add flow label and TTL copy support by Neale Ranns · 3 years, 11 months ago
  28. 751bb13 Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy" by Matthew Smith · 3 years, 11 months ago
  29. c7eaa71 ipsec: Use the new tunnel API types to add flow label and TTL copy support by Neale Ranns · 3 years, 11 months ago
  30. a91cb45 tunnel: support copying TTL and flow label from inner to outer by Neale Ranns · 3 years, 11 months ago
  31. 490b927 ipsec: add support for AES CTR by Benoît Ganne · 4 years ago
  32. 1a52d37 ipsec: one thread index per-SA by Neale Ranns · 3 years, 11 months ago
  33. 45d6d83 ipsec: Tunnelled packets are locally generated by Neale Ranns · 4 years ago
  34. 4a58e49 ipsec: Support MPLS over IPSec[46] interface by Neale Ranns · 4 years ago
  35. 153e41a ipsec: change prediction by Fan Zhang · 4 years, 1 month ago
  36. 041add7 ipsec: Tunnel SA DSCP behaviour by Neale Ranns · 5 years ago
  37. 18f0e31 ipsec: remove pending node by Fan Zhang · 4 years, 2 months ago
  38. b040f98 misc: minimize dependencies on udp.h by Florin Coras · 4 years, 2 months ago
  39. 123b5eb ipsec: Layout and prefetching of SA struct by Neale Ranns · 4 years, 2 months ago
  40. fb7e7ed ipsec: fix padding/alignment for native IPsec encryption by Christian Hopps · 5 years ago
  41. 7885c74 ipsec: fix esp padding by Milan Lenco · 4 years, 4 months ago
  42. fdca4dd ipsec: fixed chaining ops after add footer and icv by PiotrX Kleski · 4 years, 8 months ago
  43. b1fd80f ipsec: Support 4o6 and 6o4 for SPD tunnel mode SAs by Neale Ranns · 4 years, 8 months ago
  44. 4ec36c5 fib: midchain adjacency optimisations by Neale Ranns · 4 years, 9 months ago
  45. f539578 crypto: introduce async crypto infra by Fan Zhang · 4 years, 8 months ago
  46. e4e8c6b ipsec: fix chained ESP by Filip Tehlar · 4 years, 10 months ago
  47. b0d2eda ipsec: fix udp-encap in transport mode by Alexander Chernavin · 4 years, 9 months ago
  48. ae8102e ipsec: Revert "ipsec: fix chained ESP" by Florin Coras · 4 years, 9 months ago
  49. c2c1bfd ipsec: fix chained ESP by Filip Tehlar · 4 years, 10 months ago
  50. 5cd31ec feature: provide a u16 version of vnet_feature_next by Neale Ranns · 4 years, 10 months ago
  51. 2828721 ipsec: IPSec protection for multi-point tunnel interfaces by Neale Ranns · 5 years ago
  52. efcad1a ipsec: add support for chained buffers by Filip Tehlar · 4 years, 11 months ago
  53. 0295040 ipsec: Targeted unit testing by Neale Ranns · 5 years ago
  54. 4a56f4e ipsec: Test and fix IPSec worker hand-off by Neale Ranns · 5 years ago
  55. f62a8c0 ipsec: bind an SA to a worker by Neale Ranns · 6 years ago
  56. 4505f01 ipsec: make sure pad_bytes does not exceed pad data size by Benoît Ganne · 5 years ago
  57. 8cdb1a0 ipsec: fix trailing data overflow by Filip Tehlar · 5 years ago
  58. b325983 ipsec: support 4o6 and 6o4 for tunnel protect by Neale Ranns · 5 years ago
  59. 6afaae1 ipsec: GCM, Anti-replay and ESN fixess by Neale Ranns · 5 years ago
  60. 401aedf ipsec: drop outbound ESP when no crypto alg set by Matthew Smith · 5 years ago
  61. 8f818cc ipsec: print spi in hexadecimal by Guillaume Solignac · 6 years ago
  62. c87b66c ipsec: ipsec-tun protect by Neale Ranns · 6 years ago
  63. 72f2a3a ipsec: One DPO per SA by Neale Ranns · 6 years ago
  64. 21f265f ipsec: fix sa counters in esp-encrypt by Damjan Marion · 6 years ago
  65. 1cff643 esp_encrypt: remove unnecessary code by Zhiyong Yang · 6 years ago
  66. d97918e crypto, ipsec: change GCM IV handling by Damjan Marion · 6 years ago
  67. d1bed68 crypto: improve key handling by Damjan Marion · 6 years ago
  68. 1b582b8 IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654) by Neale Ranns · 6 years ago
  69. d207fd7 IPSEC: ESP IPv6 transport mode payload length incorrect (VPP-1653) by Neale Ranns · 6 years ago
  70. 47feb11 IPSEC: support GCM in ESP by Neale Ranns · 6 years ago
  71. 49e7ef6 IPSEC: ESP with ESN tests and fixes by Neale Ranns · 6 years ago
  72. 21ada3b IPSEC-MB: Use random & non-repeating IV (VPP-1642) by Neale Ranns · 6 years ago
  73. 92e9384 crypto: Intel IPSEC-MB engine by Neale Ranns · 6 years ago
  74. 060bfb9 crypto: add support for AEAD and AES-GCM by Damjan Marion · 6 years ago
  75. 7c22ff7 ipsec: trunc_size -> icv_size by Damjan Marion · 6 years ago
  76. ea5bb77 IPSEC: remove pointless feature ordering by Neale Ranns · 6 years ago
  77. d7603d9 IPSEC: tunnel fragmentation by Neale Ranns · 6 years ago
  78. a03d182 crypto: add vnet_crypto_op_init (...) by Damjan Marion · 6 years ago
  79. 1e3aa5e ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESN by Damjan Marion · 6 years ago
  80. 987aea8 IPSEC: 4o6 and 6o4 for tunnel interfaces by Neale Ranns · 6 years ago
  81. 25edf14 IPSEC: run encrpyt as a feautre on the tunnel by Neale Ranns · 6 years ago
  82. d709cbc ipsec: compress ipsec_sa_t so data used by dataplane code fits in cacheline by Damjan Marion · 6 years ago
  83. c59b9a2 ipsec: esp-encrypt rework by Damjan Marion · 6 years ago
  84. b966e8b ipsec: keep crypto data inside SA by Damjan Marion · 6 years ago
  85. 91f17dc crypto: introduce crypto infra by Damjan Marion · 6 years ago
  86. c98275f ipsec: esp-encrypt and esp-decrypt cleanup by Damjan Marion · 6 years ago
  87. 561d1ca ipsec: cleanup, remove unnecessary code, by Kingwel Xie · 6 years ago
  88. eba31ec IPSEC: move SA counters into the stats segment by Neale Ranns · 6 years ago
  89. 47727c0 Add -fno-common compile option by Benoît Ganne · 6 years ago
  90. 8d7c502 IPSEC: no second lookup after tunnel encap by Neale Ranns · 6 years ago
  91. 4c422f9 Add IPSec interface FIB index for TX packet by Pierre Pfister · 6 years ago
  92. 240f69a Fix [csit-dev] CSIT IPv6 IPSec transport mode tests are failing by jackiechen1985 · 6 years ago
  93. 9f6957d Fix VPP-1515 IPSec receive packet error in transport mode with udp encap by jackiechen1985 · 6 years ago
  94. 2e02ba0 ipsec: simplify bumping counters - cosmetic change by Klement Sekera · 6 years ago
  95. 178cf49 Remove c-11 memcpy checks from perf-critical code by Dave Barach · 6 years ago
  96. 35a5ee1 ipsec: fix typo by Klement Sekera · 6 years ago
  97. b8f3544 migrate ipsec to new multiarch infra by Klement Sekera · 6 years ago
  98. be5a5dd ipsec: split ipsec nodes into ip4/ip6 nodes by Klement Sekera · 6 years ago
  99. 067cd62 avoid using thread local storage for thread index by Damjan Marion · 6 years ago
  100. 6452622 fix VPP-1312 Invalid UDP packet length in ipsec by Klement Sekera · 7 years ago