netdev - [PATCH ipsec v1 0/2] Update offload configuration with SA

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250122120941.2634198-1-chiachangwang@google.com>
Date: Wed, 22 Jan 2025 12:09:39 +0000
From: Chiachang Wang <chiachangwang@...gle.com>
To: netdev@...r.kernel.org, steffen.klassert@...unet.com, leonro@...dia.com
Cc: yumike@...gle.com, stanleyjhu@...gle.com, chiachangwang@...gle.com
Subject: [PATCH ipsec v1 0/2] Update offload configuration with SA

The current Security Association (SA) offload setting
cannot be modified without removing and re-adding the
SA with the new configuration. Although existing netlink
messages allow SA update and migration, the offload
setting remains unchanged even if it is modified in
the updated SA.

This patchset enhances SA update and migration to
include updating the offload setting. This is beneficial
for devices that support IPsec session management,
enabling them to update offload configurations without
disrupting existing sessions.

Chiachang Wang (2):
  xfrm: Update offload configuration during SA updates
  xfrm: Migrate offload configuaration

 include/net/xfrm.h     |  8 ++++++--
 net/xfrm/xfrm_policy.c |  4 ++--
 net/xfrm/xfrm_state.c  | 38 ++++++++++++++++++++++++++++++++++----
 net/xfrm/xfrm_user.c   | 15 +++++++++++++--
 4 files changed, 55 insertions(+), 10 deletions(-)

--
2.48.1.262.g85cc9f2d1e-goog