| /f-stack/dpdk/drivers/crypto/octeontx2/ |
| H A D | otx2_ipsec_anti_replay.h | 21 struct otx2_ipsec_replay *replay = sa->replay; in anti_replay_check() local 22 uint64_t *window = &replay->window[0]; in anti_replay_check() 26 uint64_t base = replay->base; in anti_replay_check() 27 uint32_t winb = replay->winb; in anti_replay_check() 28 uint32_t wint = replay->wint; in anti_replay_check() 71 replay->base = seq; in anti_replay_check() 119 replay->wint = ((wint + shift - 1) % ex_winsz) + 1; in anti_replay_check() 120 replay->winb = ((winb + shift - 1) % ex_winsz) + 1; in anti_replay_check() 122 replay->base = seq; in anti_replay_check() 194 rte_spinlock_lock(&sa->replay->lock); in cpt_ipsec_antireplay_check() [all …]
|
| H A D | otx2_ipsec_fp.h | 151 struct otx2_ipsec_replay *replay; member
|
| /f-stack/freebsd/netipsec/ |
| H A D | ipsec.c | 1251 struct secreplay *replay; in ipsec_chkreplay() local 1259 replay = sav->replay; in ipsec_chkreplay() 1262 if (replay->wsize == 0) in ipsec_chkreplay() 1299 replay->overflow++; in ipsec_chkreplay() 1340 replay->overflow++; in ipsec_chkreplay() 1374 replay = sav->replay; in ipsec_updatereplay() 1377 if (replay->wsize == 0) in ipsec_updatereplay() 1410 replay->count++; in ipsec_updatereplay() 1430 replay->count++; in ipsec_updatereplay() 1445 set_window(replay, seq); in ipsec_updatereplay() [all …]
|
| H A D | xform_esp.c | 123 if (sav->tdb_authalgxform != NULL && sav->replay) in esp_hdrsiz() 330 if (esph != NULL && sav->replay != NULL && sav->replay->wsize != 0) { in esp_input() 373 (sav->replay != NULL) && (sav->replay->wsize != 0)) { in esp_input() 401 sav->replay != NULL && sav->replay->wsize != 0) in esp_input() 564 if (sav->replay) { in esp_input_cb() 786 if (sav->replay) { in esp_output() 787 uint32_t replay; in esp_output() local 793 sav->replay->count++; in esp_output() 794 replay = htonl((uint32_t)sav->replay->count); in esp_output() 796 bcopy((caddr_t) &replay, mtod(mo, caddr_t) + roff + in esp_output() [all …]
|
| H A D | xform_ah.c | 194 if (((sav->flags&SADB_X_EXT_OLD) == 0) ^ (sav->replay != NULL)) { in ah_init0() 198 sav->replay == NULL ? "without" : "with")); in ah_init0() 564 if (sav->replay != NULL && sav->replay->wsize != 0 && in ah_input() 662 sav->replay != NULL && sav->replay->wsize != 0) { in ah_input() 773 if (sav->replay) { in ah_input_cb() 939 if (sav->replay) { in ah_output() 940 if ((sav->replay->count == ~0 || in ah_output() 942 ((uint32_t)sav->replay->count) == ~0)) && in ah_output() 956 sav->replay->count++; in ah_output() 957 ah->ah_seq = htonl((uint32_t)sav->replay->count); in ah_output() [all …]
|
| H A D | key_debug.c | 489 struct sadb_x_sa_replay *replay; in kdebug_sadb_x_sa_replay() local 495 replay = (struct sadb_x_sa_replay *)ext; in kdebug_sadb_x_sa_replay() 497 replay->sadb_x_sa_replay_replay); in kdebug_sadb_x_sa_replay() 879 if (sav->replay != NULL) { in kdebug_secasv() 882 kdebug_secreplay(sav->replay); in kdebug_secasv()
|
| H A D | key.c | 3075 if (sav->replay != NULL) { in key_cleansav() 3079 sav->replay = NULL; in key_cleansav() 3275 uint32_t replay; in key_setsaval() local 3308 replay = 0; in key_setsaval() 3326 replay = (replay + 7) >> 3; in key_setsaval() 3339 if (replay != 0) { in key_setsaval() 3364 sav->replay->wsize = replay; in key_setsaval() 3571 replay_count = sav->replay ? sav->replay->count : 0; in key_setdumpsa() 3802 sav->replay->wsize): 0; in key_setsadbsa() 7295 replay_count = sav->replay ? sav->replay->count : 0; in key_expire() [all …]
|
| H A D | keydb.h | 158 struct secreplay *replay; /* replay prevention */ member
|
| /f-stack/dpdk/lib/librte_ipsec/ |
| H A D | ipsec_sqn.h | 99 if (sa->replay.win_sz == 0) in esn_inb_check_sqn() 107 if (sqn == 0 || sqn + sa->replay.win_sz < rsn->sqn) in esn_inb_check_sqn() 112 bucket = (sqn >> WINDOW_BUCKET_BITS) & sa->replay.bucket_index_mask; in esn_inb_check_sqn() 157 sqn = reconstruct_esn(rsn->sqn, sqn, sa->replay.win_sz); in esn_inb_update_sqn() 160 if (sqn == 0 || sqn + sa->replay.win_sz < rsn->sqn) in esn_inb_update_sqn() 171 if (diff > sa->replay.nb_bucket) in esn_inb_update_sqn() 172 diff = sa->replay.nb_bucket; in esn_inb_update_sqn() 176 sa->replay.bucket_index_mask; in esn_inb_update_sqn() 182 bucket &= sa->replay.bucket_index_mask; in esn_inb_update_sqn() 219 n = sa->replay.nb_bucket; in rsn_copy()
|
| H A D | sa.c | 452 sa->replay.win_sz = wnd_sz; in fill_sa_replay() 453 sa->replay.nb_bucket = nb_bucket; in fill_sa_replay() 454 sa->replay.bucket_index_mask = nb_bucket - 1; in fill_sa_replay()
|
| H A D | sa.h | 85 } replay; member
|
| H A D | esp_inb.c | 209 sqn = reconstruct_esn(rsn->sqn, sqn, sa->replay.win_sz); in inb_get_sqn() 635 if (sa->replay.win_sz == 0) in esp_inb_rsn_update()
|
| /f-stack/dpdk/examples/ipsec-secgw/test/ |
| H A D | tun_aesgcm_defs.sh | 27 proto esp spi 7 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 33 proto esp spi 7 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 60 proto esp spi 6 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 67 proto esp spi 6 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 95 proto esp spi 8 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 102 proto esp spi 8 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 130 proto esp spi 9 reqid 3 mode tunnel replay-window 64 ${XFRM_ESN} \ 136 proto esp spi 9 reqid 4 mode tunnel replay-window 64 ${XFRM_ESN} \
|
| H A D | tun_aesctr_sha1_defs.sh | 27 proto esp spi 7 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 33 proto esp spi 7 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 60 proto esp spi 6 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 67 proto esp spi 6 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 95 proto esp spi 8 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 102 proto esp spi 8 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 130 proto esp spi 9 reqid 3 mode tunnel replay-window 64 ${XFRM_ESN} \ 136 proto esp spi 9 reqid 4 mode tunnel replay-window 64 ${XFRM_ESN} \
|
| H A D | tun_aescbc_sha1_defs.sh | 27 proto esp spi 7 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 33 proto esp spi 7 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 60 proto esp spi 6 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 67 proto esp spi 6 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 95 proto esp spi 8 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 102 proto esp spi 8 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 130 proto esp spi 9 reqid 3 mode tunnel replay-window 64 ${XFRM_ESN} \ 136 proto esp spi 9 reqid 4 mode tunnel replay-window 64 ${XFRM_ESN} \
|
| H A D | tun_3descbc_sha1_defs.sh | 27 proto esp spi 7 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 33 proto esp spi 7 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 60 proto esp spi 6 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 67 proto esp spi 6 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 95 proto esp spi 8 reqid 1 mode tunnel replay-window 64 ${XFRM_ESN} \ 102 proto esp spi 8 reqid 2 mode tunnel replay-window 64 ${XFRM_ESN} \ 130 proto esp spi 9 reqid 3 mode tunnel replay-window 64 ${XFRM_ESN} \ 136 proto esp spi 9 reqid 4 mode tunnel replay-window 64 ${XFRM_ESN} \
|
| H A D | trs_aesgcm_defs.sh | 25 proto esp spi 7 reqid 1 mode transport replay-window 64 ${XFRM_ESN} \ 31 proto esp spi 7 reqid 2 mode transport replay-window 64 ${XFRM_ESN} \ 56 proto esp spi 9 reqid 3 mode transport replay-window 64 ${XFRM_ESN} \ 62 proto esp spi 9 reqid 4 mode transport replay-window 64 ${XFRM_ESN} \
|
| H A D | trs_aesctr_sha1_defs.sh | 25 proto esp spi 7 reqid 1 mode transport replay-window 64 ${XFRM_ESN} \ 31 proto esp spi 7 reqid 2 mode transport replay-window 64 ${XFRM_ESN} \ 57 proto esp spi 9 reqid 3 mode transport replay-window 64 ${XFRM_ESN} \ 63 proto esp spi 9 reqid 4 mode transport replay-window 64 ${XFRM_ESN} \
|
| H A D | trs_3descbc_sha1_defs.sh | 25 proto esp spi 7 reqid 1 mode transport replay-window 64 ${XFRM_ESN} \ 31 proto esp spi 7 reqid 2 mode transport replay-window 64 ${XFRM_ESN} \ 57 proto esp spi 9 reqid 3 mode transport replay-window 64 ${XFRM_ESN} \ 63 proto esp spi 9 reqid 4 mode transport replay-window 64 ${XFRM_ESN} \
|
| H A D | trs_aescbc_sha1_defs.sh | 25 proto esp spi 7 reqid 1 mode transport replay-window 64 ${XFRM_ESN} \ 31 proto esp spi 7 reqid 2 mode transport replay-window 64 ${XFRM_ESN} \ 57 proto esp spi 9 reqid 3 mode transport replay-window 64 ${XFRM_ESN} \ 63 proto esp spi 9 reqid 4 mode transport replay-window 64 ${XFRM_ESN} \
|
| /f-stack/tools/libxo/xolint/ |
| H A D | xolint.pl | 138 local $ln, $rln, $line, $replay; 174 $replay = $curln . " " . $line; 229 $replay .= $curln . " " . $line; 681 print STDERR $replay . "\n" if $opt_print; 688 print STDERR $replay . "\n" if $opt_print; 695 print STDERR $replay . "\n" if $opt_print;
|
| /f-stack/dpdk/drivers/net/octeontx2/ |
| H A D | otx2_ethdev_sec.c | 549 sa->replay = rte_zmalloc(NULL, sizeof(struct otx2_ipsec_replay), in eth_sec_ipsec_in_sess_create() 551 if (sa->replay == NULL) in eth_sec_ipsec_in_sess_create() 554 rte_spinlock_init(&sa->replay->lock); in eth_sec_ipsec_in_sess_create() 559 sa->replay->winb = 1; in eth_sec_ipsec_in_sess_create() 560 sa->replay->wint = sa->replay_win_sz; in eth_sec_ipsec_in_sess_create() 561 sa->replay->base = sa->replay_win_sz; in eth_sec_ipsec_in_sess_create() 636 if (sa->replay_win_sz && sa->replay) in otx2_eth_sec_free_anti_replay() 637 rte_free(sa->replay); in otx2_eth_sec_free_anti_replay()
|
| /f-stack/dpdk/doc/guides/prog_guide/ |
| H A D | ipsec_lib.rst | 73 - update SA replay window 105 - update SA replay window 314 * ESN and replay window.
|
| H A D | rte_security.rst | 137 E.g. in case of IPsec the device may internally manage anti-replay etc. 138 It will provide a configuration option for anti-replay behavior i.e. to drop 210 In case of IPsec the device may internally manage anti-replay etc. 211 It will provide a configuration option for anti-replay behavior i.e. to drop
|
| /f-stack/dpdk/doc/guides/rel_notes/ |
| H A D | release_19_11.rst | 515 ``rte_security_ipsec_xform``, which specify the anti-replay window size 516 to enable sequence replay attack handling.
|