diff mbox series

[24/25] crypto/cnxk: add copy and set DF

Message ID	1638859858-734-25-git-send-email-anoobj@marvell.com (mailing list archive)
State	Superseded, archived
Delegated to:	akhil goyal
Headers	From: Anoob Joseph <anoobj@marvell.com> To: Akhil Goyal <gakhil@marvell.com>, Jerin Jacob <jerinj@marvell.com> CC: Anoob Joseph <anoobj@marvell.com>, Archana Muniganti <marchana@marvell.com>, Tejasree Kondoj <ktejasree@marvell.com>, <dev@dpdk.org> Subject: [PATCH 24/25] crypto/cnxk: add copy and set DF Date: Tue, 7 Dec 2021 12:20:57 +0530 Message-ID: <1638859858-734-25-git-send-email-anoobj@marvell.com> In-Reply-To: <1638859858-734-1-git-send-email-anoobj@marvell.com> References: <1638859858-734-1-git-send-email-anoobj@marvell.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain Precedence: list Errors-To: dev-bounces@dpdk.org
Series	New features and improvements in cnxk crypto PMD \| [00/25] New features and improvements in cnxk crypto PMD [01/25] common/cnxk: define minor opcodes for MISC opcode [02/25] common/cnxk: add aes-xcbc key derive [03/25] common/cnxk: add bit fields for params [04/25] common/cnxk: fix reset of fields [05/25] common/cnxk: verify input args [06/25] crypto/cnxk: only enable queues that are allocated [07/25] crypto/cnxk: add lookaside IPsec AES-CBC-HMAC-SHA256 support [08/25] crypto/cnxk: clear session data before populating [09/25] crypto/cnxk: update max sec crypto caps [10/25] crypto/cnxk: write CPT CTX through microcode op [11/25] crypto/cnxk: support cnxk lookaside IPsec HMAC-SHA384/512 [12/25] crypto/cnxk: account for CPT CTX updates and flush delays [13/25] crypto/cnxk: use struct sizes for ctx writes [14/25] crypto/cnxk: add security session stats get [15/25] crypto/cnxk: add skip for unsupported cases [16/25] crypto/cnxk: add context reload for IV [17/25] crypto/cnxk: handle null chained ops [18/25] crypto/cnxk: fix inflight cnt calculation [19/25] crypto/cnxk: use atomics to access cpt res [20/25] crypto/cnxk: add more info on command timeout [21/25] crypto/cnxk: support lookaside IPsec AES-CTR [22/25] crypto/cnxk: fix extend tail calculation [23/25] crypto/cnxk: add aes xcbc and null cipher [24/25] crypto/cnxk: add copy and set DF [25/25] crypto/cnxk: add aes cmac

Checks

Context	Check	Description
ci/checkpatch	success	coding style OK

Commit Message

Anoob Joseph Dec. 7, 2021, 6:50 a.m. UTC

  Add support for copy and set DF bit.

Signed-off-by: Anoob Joseph <anoobj@marvell.com>
---
 drivers/crypto/cnxk/cn9k_ipsec.c                  | 7 ++++++-
 drivers/crypto/cnxk/cnxk_cryptodev_capabilities.c | 1 +
 2 files changed, 7 insertions(+), 1 deletion(-)

diff mbox series

Patch

diff --git a/drivers/crypto/cnxk/cn9k_ipsec.c b/drivers/crypto/cnxk/cn9k_ipsec.c
index 06f6c20..5bc0a50 100644
--- a/drivers/crypto/cnxk/cn9k_ipsec.c
+++ b/drivers/crypto/cnxk/cn9k_ipsec.c
@@ -246,6 +246,8 @@  ipsec_sa_ctl_set(struct rte_security_ipsec_xform *ipsec,
 	if (ipsec->options.udp_encap == 1)
 		ctl->encap_type = ROC_IE_ON_SA_ENCAP_UDP;
 
+	ctl->copy_df = ipsec->options.copy_df;
+
 	ctl->spi = rte_cpu_to_be_32(ipsec->spi);
 
 	rte_io_wmb();
@@ -376,13 +378,16 @@  cn9k_ipsec_outb_sa_create(struct cnxk_cpt_qp *qp,
 
 	if (ipsec->mode == RTE_SECURITY_IPSEC_SA_MODE_TUNNEL) {
 		if (ipsec->tunnel.type == RTE_SECURITY_IPSEC_TUNNEL_IPV4) {
+			uint16_t frag_off = 0;
 			ctx_len += sizeof(template->ip4);
 
 			ip4->version_ihl = RTE_IPV4_VHL_DEF;
 			ip4->time_to_live = ipsec->tunnel.ipv4.ttl;
 			ip4->type_of_service |= (ipsec->tunnel.ipv4.dscp << 2);
 			if (ipsec->tunnel.ipv4.df)
-				ip4->fragment_offset = BIT(14);
+				frag_off |= RTE_IPV4_HDR_DF_FLAG;
+			ip4->fragment_offset = rte_cpu_to_be_16(frag_off);
+
 			memcpy(&ip4->src_addr, &ipsec->tunnel.ipv4.src_ip,
 			       sizeof(struct in_addr));
 			memcpy(&ip4->dst_addr, &ipsec->tunnel.ipv4.dst_ip,
diff --git a/drivers/crypto/cnxk/cnxk_cryptodev_capabilities.c b/drivers/crypto/cnxk/cnxk_cryptodev_capabilities.c
index a0b2a1f..69ee0d9 100644
--- a/drivers/crypto/cnxk/cnxk_cryptodev_capabilities.c
+++ b/drivers/crypto/cnxk/cnxk_cryptodev_capabilities.c
@@ -1121,6 +1121,7 @@  static void
 cnxk_sec_caps_update(struct rte_security_capability *sec_cap)
 {
 	sec_cap->ipsec.options.udp_encap = 1;
+	sec_cap->ipsec.options.copy_df = 1;
 }
 
 static void