<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-IN" link="#0563C1" vlink="#954F72" style="word-wrap:break-word"> <div class="WordSection1"> Hi Arek,<o:p></o:p> How about symmetric Cryptodev encryption .<o:p></o:p> In l2fwd_cryptodev example I could see the packets from Rx queue is fetched and passed to encryption.<o:p></o:p> Is symmetric encryption , encrypting the entire packets or payload section?<o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Bala <o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Kusztal, ArkadiuszX <arkadiuszx.kusztal@intel.com> Sent: 30 May 2022 17:52 To: Balakrishnan K <Balakrishnan.K1@tatacommunications.com>; users@dpdk.org Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> For the Asym Cryptodev data to be encrypted it totally opaque -> it does not hold any information about data provided by the user, except for the algorithm parameters of course. So for example for the RSA, data that “asym_op->rsa.message.data” points to, will be encrypted up to the size of “asym_op->rsa.message.length” (provided size is in scope of possible encryption sizes) regardless if it is TLS or IKE or anything else.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>> Sent: Monday, May 30, 2022 1:59 PM To: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> Hi Arek,<o:p></o:p> Thanks for your inputs.<o:p></o:p> I wrote the sample application to encrypt the text from a file also decrypting the same.<o:p></o:p> Now next step is to encrypt the incoming packets.<o:p></o:p> I have one basic doubt. During rte_cryptodev_enqueue_burst call with operation type as RTE_CRYPTO_ASYM_OP_ENCRYPT.<o:p></o:p> For the incoming packet.<o:p></o:p> what is being encrypted ,Is it entire packet or the payload(data section) ?<o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Bala <o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>> Sent: 25 May 2022 16:13 To: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> Hi Bala,<o:p></o:p> <o:p> </o:p> To fill the below struct do I need to extract Publickey exponent , Private key exponent etc.<o:p></o:p> [Arek] – yes, you need to convert keys into big-endian unsigned integer.<o:p></o:p> In the file “test_cryptodev_rsa_test_vectors.h” there are few examples.<o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Arek<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>> Sent: Wednesday, May 25, 2022 12:08 PM To: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> Hi Arek,<o:p></o:p> I have public and private key with me which can be used for encryption/decryption.<o:p></o:p> <o:p> </o:p> To fill the below struct do I need to extract Publickey exponent , Private key exponent etc.<o:p></o:p> The reason why I am asking is, in openssl for encryption we will use key directly with the exposed API.<o:p></o:p> Example :<o:p></o:p> <o:p> </o:p> RSA_private_encrypt(strlen(msg), (unsigned char *)msg, encrypted, rsa, RSA_PKCS1_PADDING);<o:p></o:p> <o:p> </o:p> Here in dpdk the rsa struct looks different .<o:p></o:p> <o:p> </o:p> Thanks in advance.<o:p></o:p> <o:p> </o:p> struct rte_crypto_rsa_xform {<o:p></o:p> rte_crypto_param n;<o:p></o:p> /**< n - Modulus<o:p></o:p> * Modulus data of RSA operation in Octet-string network<o:p></o:p> * byte order format.<o:p></o:p> */<o:p></o:p> <o:p> </o:p> rte_crypto_param e;<o:p></o:p> /**< e - Public key exponent<o:p></o:p> * Public key exponent used for RSA public key operations in Octet-<o:p></o:p> * string network byte order format.<o:p></o:p> */<o:p></o:p> <o:p> </o:p> enum rte_crypto_rsa_priv_key_type key_type;<o:p></o:p> <o:p> </o:p> __extension__<o:p></o:p> union {<o:p></o:p> rte_crypto_param d;<o:p></o:p> /**< d - Private key exponent<o:p></o:p> * Private key exponent used for RSA<o:p></o:p> * private key operations in<o:p></o:p> * Octet-string network byte order format.<o:p></o:p> */<o:p></o:p> <o:p> </o:p> struct rte_crypto_rsa_priv_key_qt qt;<o:p></o:p> /**< qt - Private key in quintuple format */<o:p></o:p> };<o:p></o:p> };<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Regards,<o:p></o:p> Bala <o:p></o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Balakrishnan K Sent: 24 May 2022 17:42 To: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> Hi Arek,<o:p></o:p> Thanks for the detailed explanation.<o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Bala <o:p></o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>> Sent: 24 May 2022 14:44 To: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> <pre>I should use <o:p></o:p></pre> <pre>debug_hexdump(stdout, "encrypted message", asym_op->rsa.cipher.data,<o:p></o:p></pre> <pre> asym_op->rsa.cipher.length);<o:p></o:p></pre> <pre>to check the encrypted message for the input given?<o:p></o:p></pre> <o:p> </o:p> Yes, currently it works this way. The same way output for decryption will be placed in asym_op->rsa.message.data and input in asym_op->rsa.cipher.data.<o:p></o:p> More explanations can be found in rte_crypto_asym.h file<o:p></o:p> <a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdoc.dpdk.org%2Fapi%2Fstructrte__crypto__rsa__op__param.html&data=05%7C01%7CBalakrishnan.K1%40tatacommunications.com%7Cd1d5f8500e98400b3d8508da42370b3d%7C202104622c5e4ec8b3e20be950f292ca%7C0%7C0%7C637895101448965859%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=419sv5JsrQhsJu1D%2FSb5nOSnIZKJuRmmv%2FsdOd72MhQ%3D&reserved=0">https://doc.dpdk.org/api/structrte__crypto__rsa__op__param.html</a>.<o:p></o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>> Sent: Tuesday, May 24, 2022 7:24 AM To: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> Hi Arek,<o:p></o:p> Thanks for quick response.<o:p></o:p> I am using resulted output vector to verify the encrypted message.<o:p></o:p> <pre>I thought the encrypted data will be in the asym_op->rsa.message.data after rte_cryptodev_enqueue_burst and rte_cryptodev_enqueue_burst call with operation type RTE_CRYPTO_ASYM_OP_ENCRYPT.<o:p></o:p></pre> <pre>So ,I checked the hex_dump of asym_op->rsa.message.data.<o:p></o:p></pre> <pre><o:p> </o:p></pre> <pre>Code snippet:<o:p></o:p></pre> <pre>asym_op = result_op->asym;<o:p></o:p></pre> <pre>debug_hexdump(stdout, "encrypted message", asym_op->rsa.message.data,<o:p></o:p></pre> <pre> asym_op->rsa.message.length);<o:p></o:p></pre> <pre><o:p> </o:p></pre> <pre><o:p> </o:p></pre> <pre><o:p> </o:p></pre> <pre>Encrypted data will be placed in asym_op->rsa.cipher.data after crypto operation is my understanding is correct ?<o:p></o:p></pre> <pre>I should use <o:p></o:p></pre> <pre>debug_hexdump(stdout, "encrypted message", asym_op->rsa.cipher.data,<o:p></o:p></pre> <pre> asym_op->rsa.cipher.length);<o:p></o:p></pre> <pre>to check the encrypted message for the input given?<o:p></o:p></pre> <pre><o:p> </o:p></pre> <pre><o:p> </o:p></pre> <pre>Regards,<o:p></o:p></pre> <pre>Bala <o:p></o:p></pre> <pre><o:p> </o:p></pre> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Kusztal, ArkadiuszX <<a href="mailto:arkadiuszx.kusztal@intel.com">arkadiuszx.kusztal@intel.com</a>> Sent: 23 May 2022 18:15 To: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>>; <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: RE: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> <div style="border:dotted #003333 1.0pt;padding:10.0pt 10.0pt 10.0pt 10.0pt"> CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. <o:p></o:p> </div> <div> Hi Bala,<o:p></o:p> <o:p> </o:p> Ciphertext will be written into asym_op->rsa.cipher.data (not message.data) by the PMD, here you are using same address for both hex dumps.<o:p></o:p> Although there is a bug in debug_hexdump in this function which may cause this confusion.<o:p></o:p> <o:p> </o:p> Plus, the test you are referring is PWCT test (Pairwise conditional test) -> it will encrypt, then decrypt.<o:p></o:p> Please take a look into this comment in queue_ops_rsa_enc_dec function:<o:p></o:p> /* Use the resulted output as decryption Input vector*<o:p></o:p> So above this line there is an encryption part.<o:p></o:p> Below is decryption. <o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> Arek<o:p></o:p> <o:p> </o:p> <div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> From: Balakrishnan K <<a href="mailto:Balakrishnan.K1@tatacommunications.com">Balakrishnan.K1@tatacommunications.com</a>> Sent: Monday, May 23, 2022 1:33 PM To: <a href="mailto:users@dpdk.org">users@dpdk.org</a> Subject: how to use crypto openssl PMD for asymmetric encryption and decryption<o:p></o:p> </div> </div> <o:p> </o:p> Hi All,<o:p></o:p> I am new to dpdk. Planning to use openssl crypto PMD for encrypting/decrypting the packets.<o:p></o:p> Couldn’t find much documents on openssl PMD for asymmetric encryption/decryption.<o:p></o:p> Any one please point me in the right document.<o:p></o:p> <o:p> </o:p> I have tried to run the test cases wrote for asymmetric crypto using openssl virtual PMD.<o:p></o:p> But the output of particular test case is same after the encryption done.<o:p></o:p> <o:p> </o:p> File : app/test/test_cryptodev_asym.c<o:p></o:p> Test executable: ./app/test/dpdk-test<o:p></o:p> Test case : test_rsa_enc_dec<o:p></o:p> <o:p></o:p> Input given to encryption: <o:p></o:p> message at [0x1894e60], len=20<o:p></o:p> 00000000: F8 BA 1A 55 D0 2F 85 AE 96 7B B6 2F B6 CD A8 EB | ...U./...{./....<o:p></o:p> 00000010: 7E 78 A0 50 | ~x.P<o:p></o:p> <o:p> </o:p> After processing the output also looks like same :<o:p></o:p> encrypted message exist at [0x1894e60], len=20<o:p></o:p> 00000000: F8 BA 1A 55 D0 2F 85 AE 96 7B B6 2F B6 CD A8 EB | ...U./...{./....<o:p></o:p> 00000010: 7E 78 A0 50<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Regards,<o:p></o:p> Bala <o:p></o:p> </div> </div> </div> </div> </div> </div> </body> </html>