Gitiles
Code Review Sign In
gerrit.nordix.org / fdio / vpp / e3f59e2ae2201ba3007757b7567a3baa41e22879 / src / vnet / ipsec / esp_encrypt.c
  1. 84e6658 ipsec: add support for RFC-4543 ENCR_NULL_AUTH_AES_GMAC by Benoît Ganne · 1 year, 10 months ago
  2. 3a6bc6f ipsec: fix logic in ext_hdr_is_pre_esp by Piotr Bronowski · 1 year, 10 months ago
  3. f441b5d crypto: use fixed crypto frame pool by gaoginskx · 3 years, 7 months ago
  4. 0c1454c ipsec: fix ipsec_set_next_index set with wrong sa index when async frame commit failed by Xiaoming Jiang · 1 year, 8 months ago
  5. 5527a78 ipsec: make pre-shared keys harder to misuse by Benoît Ganne · 3 years ago
  6. ad95b06 ipsec: add per-SA error counters by Arthur de Kerhor · 2 years, 1 month ago
  7. 02dfd29 ipsec: fix AES CBC IV generation (CVE-2022-46397) by Benoît Ganne · 3 years ago
  8. dd298e8 misc: fix issues reported by clang-15 by Damjan Marion · 2 years, 2 months ago
  9. 6f1eb48 ipsec: enable UDP encap for IPv6 ESP tun protect by Matthew Smith · 2 years, 5 months ago
  10. 93688d7 ipsec: Use .api declared error counters by Neale Ranns · 2 years, 5 months ago
  11. 562cfa4 ipsec: remove the redundant code by Mohsin Kazmi · 2 years, 10 months ago
  12. c14b8cf ipsec: fix async buffer leak by Matthew Smith · 3 years, 1 month ago
  13. 03092c1 ip: extension header parsing fails for fragment header by Ole Troan · 3 years, 1 month ago
  14. 6fdcc3d fib: Don't use [midchain] adjacencies to change an interface's feature arc by Neale Ranns · 3 years, 3 months ago
  15. d0b2660 ipsec: silence gcc-11 parentheses warning by Damjan Marion · 3 years, 2 months ago
  16. af7fb04 misc: replace CLIB_PREFETCH with clib_prefetch_{load,store} by Damjan Marion · 3 years, 5 months ago
  17. 5b89110 ipsec: Fix setting the hi-sequence number for decrypt by Neale Ranns · 3 years, 6 months ago
  18. 217ba5a ipsec: fix length check when adding footer+icv by Benoît Ganne · 3 years, 6 months ago
  19. 51d56ba ipsec: fix async crypto frame leak by Matthew Smith · 3 years, 7 months ago
  20. f16e9a5 ipsec: Support async mode per-SA by Neale Ranns · 3 years, 10 months ago
  21. fc81134 ipsec: Submit fuller async frames by Neale Ranns · 3 years, 10 months ago
  22. c5fe57d ipsec: move the IPSec SA pool out of ipsec_main by Neale Ranns · 3 years, 10 months ago
  23. 2d49830 ipsec: ipsec.h tidy up by Neale Ranns · 3 years, 10 months ago
  24. aa7d766 ipsec: Store thread-index in buffer meta-data during SA handoff by Neale Ranns · 3 years, 11 months ago
  25. 9ec846c ipsec: Use the new tunnel API types to add flow label and TTL copy support by Neale Ranns · 3 years, 11 months ago
  26. 751bb13 Revert "ipsec: Use the new tunnel API types to add flow label and TTL copy" by Matthew Smith · 3 years, 11 months ago
  27. c7eaa71 ipsec: Use the new tunnel API types to add flow label and TTL copy support by Neale Ranns · 3 years, 11 months ago
  28. a91cb45 tunnel: support copying TTL and flow label from inner to outer by Neale Ranns · 3 years, 11 months ago
  29. 490b927 ipsec: add support for AES CTR by Benoît Ganne · 4 years ago
  30. 1a52d37 ipsec: one thread index per-SA by Neale Ranns · 3 years, 11 months ago
  31. 45d6d83 ipsec: Tunnelled packets are locally generated by Neale Ranns · 4 years ago
  32. 4a58e49 ipsec: Support MPLS over IPSec[46] interface by Neale Ranns · 4 years ago
  33. 153e41a ipsec: change prediction by Fan Zhang · 4 years, 1 month ago
  34. 041add7 ipsec: Tunnel SA DSCP behaviour by Neale Ranns · 5 years ago
  35. 18f0e31 ipsec: remove pending node by Fan Zhang · 4 years, 2 months ago
  36. b040f98 misc: minimize dependencies on udp.h by Florin Coras · 4 years, 2 months ago
  37. 123b5eb ipsec: Layout and prefetching of SA struct by Neale Ranns · 4 years, 2 months ago
  38. fb7e7ed ipsec: fix padding/alignment for native IPsec encryption by Christian Hopps · 5 years ago
  39. 7885c74 ipsec: fix esp padding by Milan Lenco · 4 years, 4 months ago
  40. fdca4dd ipsec: fixed chaining ops after add footer and icv by PiotrX Kleski · 4 years, 8 months ago
  41. b1fd80f ipsec: Support 4o6 and 6o4 for SPD tunnel mode SAs by Neale Ranns · 4 years, 8 months ago
  42. 4ec36c5 fib: midchain adjacency optimisations by Neale Ranns · 4 years, 9 months ago
  43. f539578 crypto: introduce async crypto infra by Fan Zhang · 4 years, 8 months ago
  44. e4e8c6b ipsec: fix chained ESP by Filip Tehlar · 4 years, 11 months ago
  45. b0d2eda ipsec: fix udp-encap in transport mode by Alexander Chernavin · 4 years, 9 months ago
  46. ae8102e ipsec: Revert "ipsec: fix chained ESP" by Florin Coras · 4 years, 9 months ago
  47. c2c1bfd ipsec: fix chained ESP by Filip Tehlar · 4 years, 11 months ago
  48. 5cd31ec feature: provide a u16 version of vnet_feature_next by Neale Ranns · 4 years, 10 months ago
  49. 2828721 ipsec: IPSec protection for multi-point tunnel interfaces by Neale Ranns · 5 years ago
  50. efcad1a ipsec: add support for chained buffers by Filip Tehlar · 4 years, 11 months ago
  51. 0295040 ipsec: Targeted unit testing by Neale Ranns · 5 years ago
  52. 4a56f4e ipsec: Test and fix IPSec worker hand-off by Neale Ranns · 5 years ago
  53. f62a8c0 ipsec: bind an SA to a worker by Neale Ranns · 6 years ago
  54. 4505f01 ipsec: make sure pad_bytes does not exceed pad data size by Benoît Ganne · 5 years ago
  55. 8cdb1a0 ipsec: fix trailing data overflow by Filip Tehlar · 5 years ago
  56. b325983 ipsec: support 4o6 and 6o4 for tunnel protect by Neale Ranns · 5 years ago
  57. 6afaae1 ipsec: GCM, Anti-replay and ESN fixess by Neale Ranns · 5 years ago
  58. 401aedf ipsec: drop outbound ESP when no crypto alg set by Matthew Smith · 5 years ago
  59. 8f818cc ipsec: print spi in hexadecimal by Guillaume Solignac · 6 years ago
  60. c87b66c ipsec: ipsec-tun protect by Neale Ranns · 6 years ago
  61. 72f2a3a ipsec: One DPO per SA by Neale Ranns · 6 years ago
  62. 21f265f ipsec: fix sa counters in esp-encrypt by Damjan Marion · 6 years ago
  63. 1cff643 esp_encrypt: remove unnecessary code by Zhiyong Yang · 6 years ago
  64. d97918e crypto, ipsec: change GCM IV handling by Damjan Marion · 6 years ago
  65. d1bed68 crypto: improve key handling by Damjan Marion · 6 years ago
  66. 1b582b8 IPSEC: IPv6 ESP transport mode incorrect packet length and checksum (VPP-1654) by Neale Ranns · 6 years ago
  67. d207fd7 IPSEC: ESP IPv6 transport mode payload length incorrect (VPP-1653) by Neale Ranns · 6 years ago
  68. 47feb11 IPSEC: support GCM in ESP by Neale Ranns · 6 years ago
  69. 49e7ef6 IPSEC: ESP with ESN tests and fixes by Neale Ranns · 6 years ago
  70. 21ada3b IPSEC-MB: Use random & non-repeating IV (VPP-1642) by Neale Ranns · 6 years ago
  71. 92e9384 crypto: Intel IPSEC-MB engine by Neale Ranns · 6 years ago
  72. 060bfb9 crypto: add support for AEAD and AES-GCM by Damjan Marion · 6 years ago
  73. 7c22ff7 ipsec: trunc_size -> icv_size by Damjan Marion · 6 years ago
  74. ea5bb77 IPSEC: remove pointless feature ordering by Neale Ranns · 6 years ago
  75. d7603d9 IPSEC: tunnel fragmentation by Neale Ranns · 6 years ago
  76. a03d182 crypto: add vnet_crypto_op_init (...) by Damjan Marion · 6 years ago
  77. 1e3aa5e ipsec: USE_EXTENDED_SEQ_NUM -> USE_ESN by Damjan Marion · 6 years ago
  78. 987aea8 IPSEC: 4o6 and 6o4 for tunnel interfaces by Neale Ranns · 6 years ago
  79. 25edf14 IPSEC: run encrpyt as a feautre on the tunnel by Neale Ranns · 6 years ago
  80. d709cbc ipsec: compress ipsec_sa_t so data used by dataplane code fits in cacheline by Damjan Marion · 6 years ago
  81. c59b9a2 ipsec: esp-encrypt rework by Damjan Marion · 6 years ago
  82. b966e8b ipsec: keep crypto data inside SA by Damjan Marion · 6 years ago
  83. 91f17dc crypto: introduce crypto infra by Damjan Marion · 6 years ago
  84. c98275f ipsec: esp-encrypt and esp-decrypt cleanup by Damjan Marion · 6 years ago
  85. 561d1ca ipsec: cleanup, remove unnecessary code, by Kingwel Xie · 6 years ago
  86. eba31ec IPSEC: move SA counters into the stats segment by Neale Ranns · 6 years ago
  87. 47727c0 Add -fno-common compile option by Benoît Ganne · 6 years ago
  88. 8d7c502 IPSEC: no second lookup after tunnel encap by Neale Ranns · 6 years ago
  89. 4c422f9 Add IPSec interface FIB index for TX packet by Pierre Pfister · 6 years ago
  90. 240f69a Fix [csit-dev] CSIT IPv6 IPSec transport mode tests are failing by jackiechen1985 · 6 years ago
  91. 9f6957d Fix VPP-1515 IPSec receive packet error in transport mode with udp encap by jackiechen1985 · 6 years ago
  92. 2e02ba0 ipsec: simplify bumping counters - cosmetic change by Klement Sekera · 6 years ago
  93. 178cf49 Remove c-11 memcpy checks from perf-critical code by Dave Barach · 6 years ago
  94. 35a5ee1 ipsec: fix typo by Klement Sekera · 6 years ago
  95. b8f3544 migrate ipsec to new multiarch infra by Klement Sekera · 6 years ago
  96. be5a5dd ipsec: split ipsec nodes into ip4/ip6 nodes by Klement Sekera · 6 years ago
  97. 067cd62 avoid using thread local storage for thread index by Damjan Marion · 6 years ago
  98. 6452622 fix VPP-1312 Invalid UDP packet length in ipsec by Klement Sekera · 7 years ago
  99. 4b089f2 ipsec: support UDP encap/decap for NAT traversal by Klement Sekera · 7 years ago
  100. 72454dd DES-CBC/3DES-CBC support for VPP IPSec Core by “mukeshyadav1984” · 7 years ago