[PATCH 0/2] crypto/mlx5: add support for plaintext import method

Raja Zidane rzidane at nvidia.com
Mon Apr 18 13:10:03 CEST 2022


Using crypto devs requires the user to log in and the supplied DEK to be
encrypted with a KEK (keys encryption key).
KEK is burned once on the nic, along with credentials for users,
and for a user to log in, he is needed to supply his creds wrapped with
the KEK.
A device comes out of the Mellanox factory with a pre-defined import
method for each algorithm. The defined method could be wrapped
mode, so the device can be used as described above, or
plaintext mode, without the need to log in and wrap supplied DEKs.

Raja Zidane (2):
  common/mlx5: extend crypto capabilities
  crypto/mlx5: support plaintext keys

 doc/guides/cryptodevs/mlx5.rst        | 17 ++++++++--
 drivers/common/mlx5/mlx5_devx_cmds.c  | 13 ++++++--
 drivers/common/mlx5/mlx5_devx_cmds.h  |  1 +
 drivers/common/mlx5/mlx5_prm.h        | 29 +++++++++++++++++
 drivers/crypto/mlx5/mlx5_crypto.c     | 43 +++++++++++++++---------
 drivers/crypto/mlx5/mlx5_crypto.h     |  3 +-
 drivers/crypto/mlx5/mlx5_crypto_dek.c | 47 +++++++++++++++++++--------
 7 files changed, 117 insertions(+), 36 deletions(-)

--
dependant on https://patchwork.dpdk.org/project/dpdk/patch/20220418110516.2105-1-rzidane@nvidia.com/
2.21.0



More information about the dev mailing list