> -----Original Message----- > From: Jastrzebski, MichalX K > Sent: Thursday, October 13, 2016 1:48 AM > To: Azarewicz, PiotrX T; De Lara Guarch, Pablo; Yang, GangX > Cc: dev at dpdk.org > Subject: RE: [dpdk-dev] [PATCH] examples/l2fwd-crypto: fix verify with > decrypt in chain > > > -----Original Message----- > > From: dev [mailto:dev-bounces at dpdk.org] On Behalf Of Piotr Azarewicz > > Sent: Wednesday, October 12, 2016 10:59 AM > > To: De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>; Yang, GangX > > <gangx.yang at intel.com> > > Cc: dev at dpdk.org > > Subject: [dpdk-dev] [PATCH] examples/l2fwd-crypto: fix verify with decrypt > > in chain > > > > This patch fix setting crypto operation data parameters in l2fwd-crypto > > application. > > From now decryption in chain with auth verify work fine. > > > > How to reproduce the issue: > > > > 1. Run l2fwd_crypto with command: > > -c 0x3 -n 4 --vdev "crypto_aesni_mb" \ > > --vdev "crypto_aesni_mb" \ > > -- -p 0x3 --chain CIPHER_HASH \ > > --cipher_op ENCRYPT --cipher_algo AES_CBC \ > > --cipher_key 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f \ > > --iv 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:ff \ > > --auth_op GENERATE --auth_algo SHA1_HMAC \ > > --auth_key > > 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11: > > 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11: > > 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11 > > > > 2. Send packet with payload and capture forwarded packet. > > Payload in forwarded packet is encrypted, what is good. > > > > 3. Run l2fwd_crypto with command: > > -c 0x3 -n 4 --vdev "crypto_aesni_mb" \ > > --vdev "crypto_aesni_mb" \ > > -- -p 0x3 --chain HASH_CIPHER \ > > --cipher_op DECRYPT --cipher_algo AES_CBC \ > > --cipher_key 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f \ > > --iv 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:ff \ > > --auth_op VERIFY --auth_algo SHA1_HMAC \ > > --auth_key > > 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11: > > 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11: > > 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11 > > > > 4. Send earlier captured packet and capture forwarded packet. > > Payload in newly captured packet is not decrypted, what is wrong. > > > > Fixes: 387259bd6c67 ("examples/l2fwd-crypto: add sample application") > > > > Signed-off-by: Piotr Azarewicz <piotrx.t.azarewicz at intel.com> > Acked-by: Michal Jastrzebski <michalx.k.jastrzebski at intel.com>
Applied to dpdk-next-crypto. Thanks, Pablo
