linux-kernel - Re: mlx5 HW crypto offload support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAKpeocU=yHJnLR0y1x7meW_C8ExBuTU=Cy4TWaWO+kcyo+c5Zg@mail.gmail.com>
Date:   Wed, 17 Feb 2021 08:21:01 +0530
From:   James Spader <jamesspader.linux@...il.com>
To:     Saeed Mahameed <saeedm@...dia.com>
Cc:     "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
        Raed Salem <raeds@...dia.com>, Huy Nguyen <huyn@...dia.com>
Subject: Re: mlx5 HW crypto offload support

Hi Saeed

Thank you so much for the response!! It helped me a lot.

The guide is very helpful. It is detailed and well written.



Thank you
Best regards
- James


On Wed, Feb 17, 2021 at 3:26 AM Saeed Mahameed <saeedm@...dia.com> wrote:
>
> On Mon, 2021-02-15 at 23:17 +0530, James Spader wrote:
> > Hi All,
> >
> > Does HW crypto offload support for mlx5 work under virtualized
> > environment?
> > For e.g with PF (Physical Function) driver and VF(Virtual Function)
> > driver.
> >
> > If yes, then how does the information that is required to create
> > security association get passed to the PF driver?
> >
> > For example in rx full offload the FDB table needs to match the spi.
> > As the spi is created by the VF driver, how does its value get
> > communicated to PF driver...
> >
>
> Hi James,
>
> please find this guide [1] for a step by step configuration, i hope it
> will answer your questions.
>
> the solution is only in OFED package right now, Huy and Raed "CCed" are
> working on the upstream submission.
>
> The link below discusses the configuration for Bluefield smart device,
> but the concept should be the same for Native SRIOV.
>
> [1]
> https://community.mellanox.com/s/article/ConnectX-6DX-Bluefield-2-IPsec-HW-Full-Offload-Configuration-Guide
>