1.. SPDX-License-Identifier: BSD-3-Clause 2 Copyright(c) 2016 Intel Corporation. 3 4OpenSSL Crypto Poll Mode Driver 5=============================== 6 7This code provides the initial implementation of the openssl poll mode 8driver. All cryptography operations are using Openssl library crypto API. 9Each algorithm uses EVP interface from openssl API - which is recommended 10by Openssl maintainers. 11 12For more details about openssl library please visit openssl webpage: 13https://www.openssl.org/ 14 15Features 16-------- 17 18OpenSSL PMD has support for: 19 20Supported cipher algorithms: 21 22* ``RTE_CRYPTO_CIPHER_3DES_CBC`` 23* ``RTE_CRYPTO_CIPHER_AES_CBC`` 24* ``RTE_CRYPTO_CIPHER_AES_CTR`` 25* ``RTE_CRYPTO_CIPHER_3DES_CTR`` 26* ``RTE_CRYPTO_CIPHER_DES_DOCSISBPI`` 27 28Supported authentication algorithms: 29 30* ``RTE_CRYPTO_AUTH_AES_GMAC`` 31* ``RTE_CRYPTO_AUTH_MD5`` 32* ``RTE_CRYPTO_AUTH_SHA1`` 33* ``RTE_CRYPTO_AUTH_SHA224`` 34* ``RTE_CRYPTO_AUTH_SHA256`` 35* ``RTE_CRYPTO_AUTH_SHA384`` 36* ``RTE_CRYPTO_AUTH_SHA512`` 37* ``RTE_CRYPTO_AUTH_MD5_HMAC`` 38* ``RTE_CRYPTO_AUTH_SHA1_HMAC`` 39* ``RTE_CRYPTO_AUTH_SHA224_HMAC`` 40* ``RTE_CRYPTO_AUTH_SHA256_HMAC`` 41* ``RTE_CRYPTO_AUTH_SHA384_HMAC`` 42* ``RTE_CRYPTO_AUTH_SHA512_HMAC`` 43 44Supported AEAD algorithms: 45 46* ``RTE_CRYPTO_AEAD_AES_GCM`` 47* ``RTE_CRYPTO_AEAD_AES_CCM`` 48 49Supported Asymmetric Crypto algorithms: 50 51* ``RTE_CRYPTO_ASYM_XFORM_RSA`` 52* ``RTE_CRYPTO_ASYM_XFORM_DSA`` 53* ``RTE_CRYPTO_ASYM_XFORM_DH`` 54* ``RTE_CRYPTO_ASYM_XFORM_MODINV`` 55* ``RTE_CRYPTO_ASYM_XFORM_MODEX`` 56 57 58Installation 59------------ 60 61To compile openssl PMD, appropriate openssl packages have to be installed 62in the build environment. 63 64The newest openssl library version is supported: 65 66* 1.0.2h-fips 3 May 2016. 67 68Older versions that were also verified: 69 70* 1.0.1f 6 Jan 2014 71* 1.0.1 14 Mar 2012 72 73For Ubuntu 14.04 LTS these packages have to be installed in the build system: 74 75.. code-block:: console 76 77 sudo apt-get install openssl 78 sudo apt-get install libc6-dev-i386 # for i686-native-linux-gcc target 79 80This code was also verified on Fedora 24. 81This code has NOT been verified on FreeBSD yet. 82 83Initialization 84-------------- 85 86User can use app/test application to check how to use this pmd and to verify 87crypto processing. 88 89Test name is cryptodev_openssl_autotest. 90For asymmetric crypto operations testing, run cryptodev_openssl_asym_autotest. 91 92To verify real traffic l2fwd-crypto example can be used with this command: 93 94.. code-block:: console 95 96 sudo ./<build_dir>/examples/dpdk-l2fwd-crypto -l 0-1 -n 4 --vdev "crypto_openssl" 97 --vdev "crypto_openssl"-- -p 0x3 --chain CIPHER_HASH 98 --cipher_op ENCRYPT --cipher_algo AES_CBC 99 --cipher_key 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f 100 --iv 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:ff 101 --auth_op GENERATE --auth_algo SHA1_HMAC 102 --auth_key 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11 103 :11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11 104 :11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11 105 106Limitations 107----------- 108 109* Maximum number of sessions is 2048. 110* Chained mbufs are supported only for source mbuf (destination must be 111 contiguous). 112* Hash only is not supported for GCM and GMAC. 113* Cipher only is not supported for GCM and GMAC. 114