Gitiles
Code Review
Sign In
gerrit.nordix.org
/
fdio
/
vpp
/
2089c69efbc4ae5c64cab8a5418187b21478987a
/
src
/
vnet
/
ipsec
f7f4964
ipsec: ipsec-input: check for too-short packets
by Benoît Ganne
· 5 years ago
c520fe7
ipsec: fix esp trace seq number overflow
by Benoît Ganne
· 5 years ago
c41217a
ikev2: fix GCM cipher
by Filip Tehlar
· 5 years ago
89b2495
ipsec: fix tunnel protection removal
by Filip Tehlar
· 5 years ago
8133c78
ipsec: fix use-after-free
by Benoît Ganne
· 5 years ago
01d61e7
ipsec: add insecure option for format of SA
by Christian E. Hopps
· 5 years ago
b325983
ipsec: support 4o6 and 6o4 for tunnel protect
by Neale Ranns
· 5 years ago
769145c
ip: respect buffer boundary when searching for ipv6 headers
by Klement Sekera
· 6 years ago
d770cfc
ipsec ip tcp l2: multiarch nodes cannot be declared as static
by Damjan Marion
· 5 years ago
670027a
ipsec: Add 'detail' option to 'sh ipsec sa'
by Neale Ranns
· 5 years ago
2cdcd0c
ipsec: Fix NULL encryption algorithm
by Neale Ranns
· 5 years ago
77cc14a
ipsec: fix missed IPSEC_INTEG_ALG_MD5_96
by Dmitry Vakhrushev
· 5 years ago
3b9374f
ipsec: Redo the anit-replay check post decrypt
by Neale Ranns
· 5 years ago
6b43ce5
ipsec: Typo in flag name
by Neale Ranns
· 5 years ago
6afaae1
ipsec: GCM, Anti-replay and ESN fixess
by Neale Ranns
· 5 years ago
1f50bf8
fib: FIB Entry tracking
by Neale Ranns
· 5 years ago
f41110d
ipsec: register for port 4500 at INIT
by Neale Ranns
· 5 years ago
41afb33
ipsec: handle UDP keepalives
by Neale Ranns
· 5 years ago
37dab43
ipsec: coverity found c-n-p error
by Neale Ranns
· 5 years ago
4b0b0d4
ipsec: rewind missing from dual loop
by Neale Ranns
· 5 years ago
401aedf
ipsec: drop outbound ESP when no crypto alg set
by Matthew Smith
· 5 years ago
495d7ff
ipsec: Reference count the SAs
by Neale Ranns
· 5 years ago
719beb7
ip ipsec: Remove IPSec SPI-0 punt reason
by Neale Ranns
· 5 years ago
a4d2431
ipsec: Revert "IPSEC: remove byte swap operations in DP during SPD classify"
by Neale Ranns
· 5 years ago
d2029bc
ipsec: Revert "IPSEC: remove double byte swap of IP addresses"
by Neale Ranns
· 5 years ago
8f818cc
ipsec: print spi in hexadecimal
by Guillaume Solignac
· 6 years ago
ece2ae0
ipsec: return error if the engine backend has no handler for the
by Neale Ranns
· 5 years ago
4515545
ipsec: fix l2 header handling in ah encrypt
by Klement Sekera
· 5 years ago
c87b66c
ipsec: ipsec-tun protect
by Neale Ranns
· 6 years ago
72f2a3a
ipsec: One DPO per SA
by Neale Ranns
· 5 years ago
2f05220
ipsec: return original SA create error for tunnel create
by Neale Ranns
· 6 years ago
d83c4a8
ipsec: Display user specified SPI ID not VPP's index
by Neale Ranns
· 6 years ago
a6bee0a
ipsec: Correctly rewind the buffer to the IP header when punting UDP encapped SPI-0 packets
by Neale Ranns
· 6 years ago
fb341b8
ipsec: remove spurious warnings
by Neale Ranns
· 6 years ago
6230eea
ipsec: ah_decrypt rework
by Filip Tehlar
· 6 years ago
f292242
ipsec: remove the set_key API
by Neale Ranns
· 6 years ago
98d6ee7
ipsec: fix combined counters in ah-encrypt node
by Filip Tehlar
· 6 years ago
21f265f
ipsec: fix sa counters in esp-encrypt
by Damjan Marion
· 6 years ago
867dfdd
ipsec: fix sa counters in esp-decrypt
by Damjan Marion
· 6 years ago
e6be702
IPSEC: some CLI fixes
by Neale Ranns
· 6 years ago
5f08ab6
Fix: bug prevented IPsec ipv4 SPDs to show correctly
by Guillaume Solignac
· 6 years ago
0647cf2
IPSec: memcpy of integ key bork
by Neale Ranns
· 6 years ago
2a2e593
IPsec: modify post-decrypt buf len calculation
by Matthew G Smith
· 6 years ago
30b8b4a
ipsec: fix perf issue in esp_aad_fill
by Damjan Marion
· 6 years ago
1197449
ipsec: ah_encrypt rework
by Filip Tehlar
· 6 years ago
50f0ac0
Punt: socket register for exception dispatched/punted packets based on reason
by Neale Ranns
· 6 years ago
d1a5b2d
IPSEC: rename default backend
by Neale Ranns
· 6 years ago
275a177
IPSEC: remove CLI check for unsupported IPv6-AH - it is supported
by Neale Ranns
· 6 years ago
0224514
IPSEC coverity fixes
by Neale Ranns
· 6 years ago
3fb65be
IPSEC: remove unecessary pass by reference of sequence number
by Neale Ranns
· 6 years ago
0dd9165
Add missing init fn dependency to ipsec_init
by Dave Barach
· 6 years ago
1cff643
esp_encrypt: remove unnecessary code
by Zhiyong Yang
· 6 years ago
e7a527f
ipsec: fix ipsec format overflow
by Benoît Ganne
· 6 years ago
be95444
crypto: enforce per-alg crypto key length
by Benoît Ganne
· 6 years ago
d97918e
crypto, ipsec: change GCM IV handling
by Damjan Marion
· 6 years ago
82d81d4
crypto: AES GCM IV length is always 12
by Damjan Marion
· 6 years ago
4cb8381
crypto_ipsecmb: use pre-expanded keys
by Damjan Marion
· 6 years ago
e8915fc
IPSEC; dpdk backend for tunnel interface encryption
by Neale Ranns
· 6 years ago
a829b13
ipsec: drop runts in esp-decrypt
by Damjan Marion
· 6 years ago
d1bed68
crypto: improve key handling
by Damjan Marion
· 6 years ago
ea6a34c
Rearrange prefetching in ipsec_output_inline
by Vratko Polak
· 6 years ago
e8e950a
Fix a ipsec command line typo
by Simon Zhang
· 6 years ago
f922116
ipsec4-output: add pkt header and data prefetching
by Zhiyong Yang
· 6 years ago
1b582b8
IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654)
by Neale Ranns
· 6 years ago
d207fd7
IPSEC: ESP IPv6 transport mode payload length incorrect (VPP-1653)
by Neale Ranns
· 6 years ago
d6c9e82
IPSEC: tunnel rekey fix and test (VPP-1652)
by Neale Ranns
· 6 years ago
80f6fd5
IPSEC: Pass the algorithm salt (used in GCM) over the API
by Neale Ranns
· 6 years ago
b64cd2c
IPSEC: SA format; don't print keys when there's no algo
by Neale Ranns
· 6 years ago
47feb11
IPSEC: support GCM in ESP
by Neale Ranns
· 6 years ago
0a0c7ee
IPSEC: crypto overflow
by Neale Ranns
· 6 years ago
49e7ef6
IPSEC: ESP with ESN tests and fixes
by Neale Ranns
· 6 years ago
21ada3b
IPSEC-MB: Use random & non-repeating IV (VPP-1642)
by Neale Ranns
· 6 years ago
92e9384
crypto: Intel IPSEC-MB engine
by Neale Ranns
· 6 years ago
4f33c80
IPSEC: for each engine and algorithm tests
by Neale Ranns
· 6 years ago
9b208ce
IPSEC: remove double byte swap of IP addresses
by Neale Ranns
· 6 years ago
1091c4a
IPSEC TEST: various hash alogrithms
by Neale Ranns
· 6 years ago
060bfb9
crypto: add support for AEAD and AES-GCM
by Damjan Marion
· 6 years ago
b71fa75
IPSEC: punt reasons; SPI=0, no-tunnel
by Neale Ranns
· 6 years ago
7c22ff7
ipsec: trunc_size -> icv_size
by Damjan Marion
· 6 years ago
5ae793a
IPSEC: correctly size per-thread data
by Neale Ranns
· 6 years ago
b294f10
IPSEC: show CLI improvements
by Neale Ranns
· 6 years ago
2b5ba95
IPSEC: tunnel scaling - don't stack the inbould SA
by Neale Ranns
· 6 years ago
ea5bb77
IPSEC: remove pointless feature ordering
by Neale Ranns
· 6 years ago
e524d45
IPSEC-GRE: fixes and API update to common types.
by Neale Ranns
· 6 years ago
b4fff3a
ipsec: esp-decrypt rework
by Damjan Marion
· 6 years ago
d7603d9
IPSEC: tunnel fragmentation
by Neale Ranns
· 6 years ago
a03d182
crypto: add vnet_crypto_op_init (...)
by Damjan Marion
· 6 years ago
1e3aa5e
ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESN
by Damjan Marion
· 6 years ago
1f4e1cb
ipsec: anti-replay code cleanup
by Damjan Marion
· 6 years ago
987aea8
IPSEC: 4o6 and 6o4 for tunnel interfaces
by Neale Ranns
· 6 years ago
45d8f85
IPSEC: fix build breakage from ships in the night merges
by Neale Ranns
· 6 years ago
25edf14
IPSEC: run encrpyt as a feautre on the tunnel
by Neale Ranns
· 6 years ago
d709cbc
ipsec: compress ipsec_sa_t so data used by dataplane code fits in cacheline
by Damjan Marion
· 6 years ago
af3f078
IPSEC: more expressive API errors
by Neale Ranns
· 6 years ago
c59b9a2
ipsec: esp-encrypt rework
by Damjan Marion
· 6 years ago
50d5069
IPSEC: improved policy delete
by Neale Ranns
· 6 years ago
3833ffd
IPSEC tests fnd fix or Extended Sequence Numbers
by Neale Ranns
· 6 years ago
af73eda
ipsec: fix esn handling
by Damjan Marion
· 6 years ago
00a4420
IPSEC: test for packet drop on sequence number wrap
by Neale Ranns
· 6 years ago
1ba5bc8
ipsec: add ipv6 support for ipsec tunnel interface
by Kingwel Xie
· 6 years ago
Next »