patch 'examples/ipsec-secgw: fix IV length in CTR 192/256' has been queued to stable release 23.11.4

Xueming Li xuemingl at nvidia.com
Tue Apr 8 10:01:49 CEST 2025


Hi,

FYI, your patch has been queued to stable release 23.11.4

Note it hasn't been pushed to http://dpdk.org/browse/dpdk-stable yet.
It will be pushed if I get no objections before 04/10/25. So please
shout if anyone has objections.

Also note that after the patch there's a diff of the upstream commit vs the
patch applied to the branch. This will indicate if there was any rebasing
needed to apply to the stable branch. If there were code changes for rebasing
(ie: not only metadata diffs), please double check that the rebase was
correctly done.

Queued patches are on a temporary branch at:
https://git.dpdk.org/dpdk-stable/log/?h=23.11-staging

This queued commit can be viewed at:
https://git.dpdk.org/dpdk-stable/commit/?h=23.11-staging&id=0ac73425a8b36b3de6dd5430dec8f9c1c284902a

Thanks.

Xueming Li <xuemingl at nvidia.com>

---
>From 0ac73425a8b36b3de6dd5430dec8f9c1c284902a Mon Sep 17 00:00:00 2001
From: Nithinsen Kaithakadan <nkaithakadan at marvell.com>
Date: Fri, 7 Feb 2025 13:45:43 +0000
Subject: [PATCH] examples/ipsec-secgw: fix IV length in CTR 192/256
Cc: Xueming Li <xuemingl at nvidia.com>

[ upstream commit 7e2a7c336737084d8d8ef89260e511ff5670edbf ]

This patch fixes IV length to 8 in case of AES-CTR 192/256.
AES-CTR IV length is set 8 in SA config as it is
used for per packet IV length and set it to 16
in xform since the application populates 16B IV
in the datapath. AES-CTR requires 16B IV
constructed from nonce and counter.

Fixes: 9413c3901f31 ("examples/ipsec-secgw: support additional algorithms")

Signed-off-by: Nithinsen Kaithakadan <nkaithakadan at marvell.com>
Acked-by: Anoob Joseph <anoobj at marvell.com>
Acked-by: Akhil Goyal <gakhil at marvell.com>
---
 .mailmap                  | 1 +
 examples/ipsec-secgw/sa.c | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.mailmap b/.mailmap
index 95d09b8ced..7b2798a31a 100644
--- a/.mailmap
+++ b/.mailmap
@@ -1059,6 +1059,7 @@ Nipun Gupta <nipun.gupta at amd.com> <nipun.gupta at nxp.com>
 Nir Efrati <nir.efrati at intel.com>
 Nirmoy Das <ndas at suse.de>
 Nithin Dabilpuram <ndabilpuram at marvell.com> <nithin.dabilpuram at caviumnetworks.com>
+Nithinsen Kaithakadan <nkaithakadan at marvell.com>
 Nitin Saxena <nitin.saxena at caviumnetworks.com>
 Nitzan Weller <nitzanwe at mellanox.com>
 Nizan Zorea <nizan.zorea at intel.com>
diff --git a/examples/ipsec-secgw/sa.c b/examples/ipsec-secgw/sa.c
index 6ae0e49fd7..9956b240f0 100644
--- a/examples/ipsec-secgw/sa.c
+++ b/examples/ipsec-secgw/sa.c
@@ -104,14 +104,14 @@ const struct supported_cipher_algo cipher_algos[] = {
 	{
 		.keyword = "aes-192-ctr",
 		.algo = RTE_CRYPTO_CIPHER_AES_CTR,
-		.iv_len = 16,
+		.iv_len = 8,
 		.block_size = 16,
 		.key_len = 28
 	},
 	{
 		.keyword = "aes-256-ctr",
 		.algo = RTE_CRYPTO_CIPHER_AES_CTR,
-		.iv_len = 16,
+		.iv_len = 8,
 		.block_size = 16,
 		.key_len = 36
 	},
-- 
2.34.1

---
  Diff of the applied patch vs upstream commit (please double-check if non-empty:
---
--- -	2025-04-08 15:39:06.724204723 +0800
+++ 0025-examples-ipsec-secgw-fix-IV-length-in-CTR-192-256.patch	2025-04-08 15:39:05.936436578 +0800
@@ -1 +1 @@
-From 7e2a7c336737084d8d8ef89260e511ff5670edbf Mon Sep 17 00:00:00 2001
+From 0ac73425a8b36b3de6dd5430dec8f9c1c284902a Mon Sep 17 00:00:00 2001
@@ -4,0 +5,3 @@
+Cc: Xueming Li <xuemingl at nvidia.com>
+
+[ upstream commit 7e2a7c336737084d8d8ef89260e511ff5670edbf ]
@@ -14 +16,0 @@
-Cc: stable at dpdk.org
@@ -25 +27 @@
-index b3ffe83f46..b8c482d0e5 100644
+index 95d09b8ced..7b2798a31a 100644
@@ -28 +30,2 @@
-@@ -1119,6 +1119,7 @@ Nir Efrati <nir.efrati at intel.com>
+@@ -1059,6 +1059,7 @@ Nipun Gupta <nipun.gupta at amd.com> <nipun.gupta at nxp.com>
+ Nir Efrati <nir.efrati at intel.com>
@@ -30 +32,0 @@
- Nishikant Nayak <nishikanta.nayak at intel.com>
@@ -37 +39 @@
-index 425bfbf590..313919b4b5 100644
+index 6ae0e49fd7..9956b240f0 100644


More information about the stable mailing list