Cryptodev and Security Library Updates in DPDK - Akhil Goyal & Anoob Joseph, Marvell
Cryptodev and Security Library Updates in DPDK - Akhil Goyal & Anoob Joseph, Marvell
In the past few releases of DPDK, there has been an addition of various protocol offloads and useful features in rte_security which are not much explored and needs to be highlighted. - MACsec - Provides point-to-point security on Ethernet(Layer 2) links. - TLS/DTLS record protocol - A layer 4 security protocol - Rx flow inject - An alternate datapath for security processing in cases when the inline protocol processing cannot be performed due to non-protocol reasons like outer fragmentation etc. - IPv4/IPv6 reassembly on inline inbound IPsec processing. New algorithms added in cryptodev - ShangMi algorithms - SM2/SM3/SM4 - Secure Hash Algorithm and KECCAK (SHAKE) - Updates on asymmetric crypto This session will explain the details about the offloads and their corresponding use cases along with future roadmap for cryptodev and security libraries.