[PATCH 00/16] fixes and improvements to cnxk crypto PMD
Tejasree Kondoj
ktejasree at marvell.com
Mon Oct 19 15:07:41 CEST 2026
This series adds improvements and fixes to cnxk crypto PMD.
Rupesh Chiluka (11):
common/cnxk: validate cipher key length in IPsec SA fill
crypto/cnxk: reject truncated TLS records in decrypt
crypto/cnxk: validate TLS xform and keys before SA key copy
crypto/cnxk: reject oversized SG vectors in raw datapath
crypto/cnxk: guard trim len bounds in TLS 1.2 MAC trim
crypto/cnxk: guard trim len in TLS 1.2 MAC trim for CN20K
crypto/cnxk: validate TLS 1.2 MAC trim lengths
crypto/cnxk: bound SG segment count in packet iov builders
crypto/cnxk: bound SG iovec index in mbuf walk
crypto/cnxk: add cq_ena devarg for CPT CQ mode
crypto/cnxk: size CN20K IPsec SA by context length
Tejasree Kondoj (5):
common/cnxk: use context invalidate for cn20k
crypto/cnxk: return HW CPTR from cptr_get for cn20k
crypto/cnxk: enable cq_all and allocate extra CQ line
crypto/cnxk: fix CN20K CPT error recovery
crypto/cnxk: enable ctx cache for cn20k crypto
doc/guides/cryptodevs/cnxk.rst | 16 ++++
drivers/common/cnxk/cnxk_security.c | 15 ++-
drivers/common/cnxk/roc_cpt.c | 97 +++++++++++++++++---
drivers/common/cnxk/roc_cpt.h | 3 +
drivers/crypto/cnxk/cn10k_cryptodev_ops.c | 36 ++++++--
drivers/crypto/cnxk/cn10k_tls.c | 33 ++++++-
drivers/crypto/cnxk/cn10k_tls_ops.h | 12 +++
drivers/crypto/cnxk/cn20k_cryptodev_ops.c | 39 ++++++--
drivers/crypto/cnxk/cn20k_ipsec.c | 42 +++------
drivers/crypto/cnxk/cn20k_tls.c | 73 +++++++--------
drivers/crypto/cnxk/cn20k_tls_ops.h | 6 ++
drivers/crypto/cnxk/cnxk_cryptodev.h | 1 +
drivers/crypto/cnxk/cnxk_cryptodev_devargs.c | 28 +++++-
drivers/crypto/cnxk/cnxk_cryptodev_ops.c | 10 +-
drivers/crypto/cnxk/cnxk_cryptodev_ops.h | 4 +-
drivers/crypto/cnxk/cnxk_se.h | 84 +++++++++++++++--
16 files changed, 389 insertions(+), 110 deletions(-)
--
2.43.0
More information about the dev
mailing list