netdev - [PATCH ipsec v2 0/1] Update offload configuration with SA

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20250220073515.3177296-1-chiachangwang@google.com>
Date: Thu, 20 Feb 2025 07:35:14 +0000
From: Chiachang Wang <chiachangwang@...gle.com>
To: chiachangwang@...gle.com
Cc: leonro@...dia.com, netdev@...r.kernel.org, stanleyjhu@...gle.com, 
	steffen.klassert@...unet.com, yumike@...gle.com
Subject: [PATCH ipsec v2 0/1] Update offload configuration with SA

The current Security Association (SA) offload setting
cannot be modified without removing and re-adding the
SA with the new configuration. Although existing netlink
messages allow SA migration, the offload setting will
be removed after migration.

This patchset enhances SA migration to include updating
the offload setting. This is beneficial for devices that
support IPsec session management.


v1 -> v2:
- Revert "xfrm: Update offload configuration during SA update"
  change as the patch can be protentially handled in the
  hardware without the change.
- Address review feedback to correct the logic in the
  xfrm_state_migrate in the migration offload configuration
  change.
- Revise the commit message for "xfrm: Migrate offload configuration"

Chiachang Wang (1):
 xfrm: Migrate offload configuration

 include/net/xfrm.h     |  8 ++++++--
 net/xfrm/xfrm_policy.c |  4 ++--
 net/xfrm/xfrm_state.c  | 14 +++++++++++---
 net/xfrm/xfrm_user.c   | 15 +++++++++++++--
 4 files changed, 32 insertions(+), 9 deletions(-)

--
2.48.1.601.g30ceb7b040-goog