linux-kernel - Re: mlx5 HW crypto offload support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <875d20889c9528190cd661202030b6fccc25d120.camel@nvidia.com>
Date:   Tue, 16 Feb 2021 21:56:40 +0000
From:   Saeed Mahameed <saeedm@...dia.com>
To:     "jamesspader.linux@...il.com" <jamesspader.linux@...il.com>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
CC:     Saeed Mahameed <saeedm@...dia.com>, Raed Salem <raeds@...dia.com>,
        "Huy Nguyen" <huyn@...dia.com>
Subject: Re: mlx5 HW crypto offload support

On Mon, 2021-02-15 at 23:17 +0530, James Spader wrote:
> Hi All,
> 
> Does HW crypto offload support for mlx5 work under virtualized
> environment?
> For e.g with PF (Physical Function) driver and VF(Virtual Function)
> driver.
> 
> If yes, then how does the information that is required to create
> security association get passed to the PF driver?
> 
> For example in rx full offload the FDB table needs to match the spi.
> As the spi is created by the VF driver, how does its value get
> communicated to PF driver...
> 

Hi James, 

please find this guide [1] for a step by step configuration, i hope it
will answer your questions.

the solution is only in OFED package right now, Huy and Raed "CCed" are
working on the upstream submission.

The link below discusses the configuration for Bluefield smart device,
but the concept should be the same for Native SRIOV.

[1]
https://community.mellanox.com/s/article/ConnectX-6DX-Bluefield-2-IPsec-HW-Full-Offload-Configuration-Guide