numam-dpdk/lib/security
Akhil Goyal bbbe6c596b security: support MACsec
Added support for MACsec in rte_security for offloading
MACsec Protocol operation to inline NIC device or a crypto device.

To support MACsec we cannot just make one security session and
send with the packet to process it. MACsec specifications suggest,
it has 3 different entities - SECY Entity, SC (secure channel) and
SA (security association). And same SA can be used by multiple SCs and
similarly many SECY can have same SCs. Hence, in order to support this
many to one relationships between all entities, 2 new APIs are created -
rte_security_macsec_sc_create and rte_security_macsec_sa_create.
Flow of execution of the APIs would be as
- rte_security_macsec_sa_create
- rte_security_macsec_sc_create
- rte_security_session_create (for secy)
And in case of inline protocol processing rte_flow can be created with
rte_security action. A new flow item will be added for MACsec header.
New APIs are also created for getting SC and SA stats.

Signed-off-by: Akhil Goyal <gakhil@marvell.com>
2022-09-28 21:31:14 +02:00
..
meson.build security: use net library to include IP structs 2021-10-07 14:47:35 +02:00
rte_security_driver.h security: support MACsec 2022-09-28 21:31:14 +02:00
rte_security.c security: support MACsec 2022-09-28 21:31:14 +02:00
rte_security.h security: support MACsec 2022-09-28 21:31:14 +02:00
version.map security: support MACsec 2022-09-28 21:31:14 +02:00