lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-Id: <20230811153249.283984-1-radu-nicolae.pirea@oss.nxp.com> Date: Fri, 11 Aug 2023 18:32:44 +0300 From: "Radu Pirea (NXP OSS)" <radu-nicolae.pirea@....nxp.com> To: andrew@...n.ch, hkallweit1@...il.com, linux@...linux.org.uk, davem@...emloft.net, edumazet@...gle.com, kuba@...nel.org, pabeni@...hat.com, richardcochran@...il.com, sd@...asysnail.net Cc: netdev@...r.kernel.org, linux-kernel@...r.kernel.org, "Radu Pirea (NXP OSS)" <radu-nicolae.pirea@....nxp.com> Subject: [RFC net-next v1 0/5] Add MACsec support for TJA11XX C45 PHYs This is the MACsec support for TJA11XX PHYs. The MACsec block encrypts the ethernet frames on the fly and has no buffering. This operation will grow the frames by 32 bytes. If the frames are sent back to back, the MACsec block will not have enough room to insert the SecTAG and the ICV and the frames will be dropped. To mitigate this, the PHY can parse a specific ethertype with some padding bytes and replace them with the SecTAG and ICV. These padding bytes might be dummy or might contain information about TX SC that must be used to encrypt the frame. On the RX path, the PHY can insert a similar tag that contains information about the RX SC which received the frame. However, the RX tag is not enabled in this patch series, but I consider this important for the review. Radu P. Radu Pirea (NXP OSS) (5): net: macsec: declare macsec_pn_wrapped shim net: phy: remove MACSEC guard net: phy: nxp-c45-tja11xx add MACsec support net: macsec: introduce mdo_insert_tx_tag net: phy: nxp-c45-tja11xx: implement mdo_insert_tx_tag MAINTAINERS | 2 +- drivers/net/macsec.c | 79 + drivers/net/phy/Makefile | 2 +- drivers/net/phy/nxp-c45-tja11xx-macsec.c | 1878 ++++++++++++++++++++++ drivers/net/phy/nxp-c45-tja11xx.c | 72 +- drivers/net/phy/nxp-c45-tja11xx.h | 37 + include/linux/phy.h | 2 - include/net/macsec.h | 12 + 8 files changed, 2051 insertions(+), 33 deletions(-) create mode 100644 drivers/net/phy/nxp-c45-tja11xx-macsec.c create mode 100644 drivers/net/phy/nxp-c45-tja11xx.h -- 2.34.1
Powered by blists - more mailing lists