patch 'examples/ipsec-secgw: fix IV length in CTR 192/256' has been queued to stable release 22.11.8

[luca.boccassi at gmail.com]

Hi,

FYI, your patch has been queued to stable release 22.11.8

Note it hasn't been pushed to http://dpdk.org/browse/dpdk-stable yet.
It will be pushed if I get no objections before 03/09/25. So please
shout if anyone has objections.

Also note that after the patch there's a diff of the upstream commit vs the
patch applied to the branch. This will indicate if there was any rebasing
needed to apply to the stable branch. If there were code changes for rebasing
(ie: not only metadata diffs), please double check that the rebase was
correctly done.

Queued patches are on a temporary branch at:
https://github.com/bluca/dpdk-stable

This queued commit can be viewed at:
https://github.com/bluca/dpdk-stable/commit/818ae99bdfacbee05b8dcef2fd697ec5e948c736

Thanks.

Luca Boccassi

---
>From 818ae99bdfacbee05b8dcef2fd697ec5e948c736 Mon Sep 17 00:00:00 2001
From: Nithinsen Kaithakadan <nkaithakadan at marvell.com>
Date: Fri, 7 Feb 2025 13:45:43 +0000
Subject: [PATCH] examples/ipsec-secgw: fix IV length in CTR 192/256

[ upstream commit 7e2a7c336737084d8d8ef89260e511ff5670edbf ]

This patch fixes IV length to 8 in case of AES-CTR 192/256.
AES-CTR IV length is set 8 in SA config as it is
used for per packet IV length and set it to 16
in xform since the application populates 16B IV
in the datapath. AES-CTR requires 16B IV
constructed from nonce and counter.

Fixes: 9413c3901f31 ("examples/ipsec-secgw: support additional algorithms")

Signed-off-by: Nithinsen Kaithakadan <nkaithakadan at marvell.com>
Acked-by: Anoob Joseph <anoobj at marvell.com>
Acked-by: Akhil Goyal <gakhil at marvell.com>
---
 .mailmap                  | 1 +
 examples/ipsec-secgw/sa.c | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.mailmap b/.mailmap
index 30b07d12a3..b4cce78ea6 100644
--- a/.mailmap
+++ b/.mailmap
@@ -1019,6 +1019,7 @@ Nipun Gupta <nipun.gupta at nxp.com>
 Nir Efrati <nir.efrati at intel.com>
 Nirmoy Das <ndas at suse.de>
 Nithin Dabilpuram <ndabilpuram at marvell.com> <nithin.dabilpuram at caviumnetworks.com>
+Nithinsen Kaithakadan <nkaithakadan at marvell.com>
 Nitin Saxena <nitin.saxena at caviumnetworks.com>
 Nitzan Weller <nitzanwe at mellanox.com>
 Noa Ezra <noae at mellanox.com>
diff --git a/examples/ipsec-secgw/sa.c b/examples/ipsec-secgw/sa.c
index 45cd29f18b..ba71fc97aa 100644
--- a/examples/ipsec-secgw/sa.c
+++ b/examples/ipsec-secgw/sa.c
@@ -103,14 +103,14 @@ const struct supported_cipher_algo cipher_algos[] = {
 	{
 		.keyword = "aes-192-ctr",
 		.algo = RTE_CRYPTO_CIPHER_AES_CTR,
-		.iv_len = 16,
+		.iv_len = 8,
 		.block_size = 16,
 		.key_len = 28
 	},
 	{
 		.keyword = "aes-256-ctr",
 		.algo = RTE_CRYPTO_CIPHER_AES_CTR,
-		.iv_len = 16,
+		.iv_len = 8,
 		.block_size = 16,
 		.key_len = 36
 	},
-- 
2.47.2

---
  Diff of the applied patch vs upstream commit (please double-check if non-empty:
---
--- -	2025-03-07 12:23:38.824367288 +0000
+++ 0022-examples-ipsec-secgw-fix-IV-length-in-CTR-192-256.patch	2025-03-07 12:23:38.026838877 +0000
@@ -1 +1 @@
-From 7e2a7c336737084d8d8ef89260e511ff5670edbf Mon Sep 17 00:00:00 2001
+From 818ae99bdfacbee05b8dcef2fd697ec5e948c736 Mon Sep 17 00:00:00 2001
@@ -5,0 +6,2 @@
+[ upstream commit 7e2a7c336737084d8d8ef89260e511ff5670edbf ]
+
@@ -14 +15,0 @@
-Cc: stable at dpdk.org
@@ -25 +26 @@
-index b3ffe83f46..b8c482d0e5 100644
+index 30b07d12a3..b4cce78ea6 100644
@@ -28 +29,2 @@
-@@ -1119,6 +1119,7 @@ Nir Efrati <nir.efrati at intel.com>
+@@ -1019,6 +1019,7 @@ Nipun Gupta <nipun.gupta at nxp.com>
+ Nir Efrati <nir.efrati at intel.com>
@@ -30 +31,0 @@
- Nishikant Nayak <nishikanta.nayak at intel.com>
@@ -35 +36 @@
- Nizan Zorea <nizan.zorea at intel.com>
+ Noa Ezra <noae at mellanox.com>
@@ -37 +38 @@
-index 425bfbf590..313919b4b5 100644
+index 45cd29f18b..ba71fc97aa 100644
@@ -40 +41 @@
-@@ -104,14 +104,14 @@ const struct supported_cipher_algo cipher_algos[] = {
+@@ -103,14 +103,14 @@ const struct supported_cipher_algo cipher_algos[] = {