netdev - Re: [PATCH net v3 0/5] macsec: offload-related fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Fri, 04 Nov 2022 10:50:17 +0000
From:   patchwork-bot+netdevbpf@...nel.org
To:     Sabrina Dubroca <sd@...asysnail.net>
Cc:     netdev@...r.kernel.org, leonro@...dia.com, atenart@...nel.org,
        mstarovoitov@...vell.com, irusskikh@...vell.com
Subject: Re: [PATCH net v3 0/5] macsec: offload-related fixes

Hello:

This series was applied to netdev/net.git (master)
by David S. Miller <davem@...emloft.net>:

On Wed,  2 Nov 2022 22:33:11 +0100 you wrote:
> I'm working on a dummy offload for macsec on netdevsim. It just has a
> small SecY and RXSC table so I can trigger failures easily on the
> ndo_* side. It has exposed a couple of issues.
> 
> The first patch is a revert of commit c850240b6c41 ("net: macsec:
> report real_dev features when HW offloading is enabled"). That commit
> tried to improve the performance of macsec offload by taking advantage
> of some of the NIC's features, but in doing so, broke macsec offload
> when the lower device supports both macsec and ipsec offload, as the
> ipsec offload feature flags were copied from the real device. Since
> the macsec device doesn't provide xdo_* ops, the XFRM core rejects the
> registration of the new macsec device in xfrm_api_check.
> 
> [...]

Here is the summary with links:
  - [net,v3,1/5] Revert "net: macsec: report real_dev features when HW offloading is enabled"
    https://git.kernel.org/netdev/net/c/8bcd560ae878
  - [net,v3,2/5] macsec: delete new rxsc when offload fails
    https://git.kernel.org/netdev/net/c/93a30947821c
  - [net,v3,3/5] macsec: fix secy->n_rx_sc accounting
    https://git.kernel.org/netdev/net/c/73a4b31c9d11
  - [net,v3,4/5] macsec: fix detection of RXSCs when toggling offloading
    https://git.kernel.org/netdev/net/c/80df4706357a
  - [net,v3,5/5] macsec: clear encryption keys from the stack after setting up offload
    https://git.kernel.org/netdev/net/c/aaab73f8fba4

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html