app/test/test_cryptodev_security_ipsec.h

   1 /* SPDX-License-Identifier: BSD-3-Clause
   2  * Copyright(C) 2021 Marvell.
   3  */
   4
   5 #ifndef _TEST_CRYPTODEV_SECURITY_IPSEC_H_
   6 #define _TEST_CRYPTODEV_SECURITY_IPSEC_H_
   7
   8 #include <rte_cryptodev.h>
   9 #include <rte_security.h>
  10
  11 #define IPSEC_TEST_PACKETS_MAX 32
  12
  13 struct ipsec_test_data {
  14         struct {
  15                 uint8_t data[32];
  16         } key;
  17         struct {
  18                 uint8_t data[32];
  19         } auth_key;
  20
  21         struct {
  22                 uint8_t data[1024];
  23                 unsigned int len;
  24         } input_text;
  25
  26         struct {
  27                 uint8_t data[1024];
  28                 unsigned int len;
  29         } output_text;
  30
  31         struct {
  32                 uint8_t data[4];
  33                 unsigned int len;
  34         } salt;
  35
  36         struct {
  37                 uint8_t data[16];
  38         } iv;
  39
  40         struct rte_security_ipsec_xform ipsec_xform;
  41
  42         bool aead;
  43
  44         union {
  45                 struct {
  46                         struct rte_crypto_sym_xform cipher;
  47                         struct rte_crypto_sym_xform auth;
  48                 } chain;
  49                 struct rte_crypto_sym_xform aead;
  50         } xform;
  51 };
  52
  53 struct ipsec_test_flags {
  54         bool display_alg;
  55         bool sa_expiry_pkts_soft;
  56         bool sa_expiry_pkts_hard;
  57         bool icv_corrupt;
  58         bool iv_gen;
  59         uint32_t tunnel_hdr_verify;
  60         bool udp_encap;
  61         bool udp_ports_verify;
  62         bool ip_csum;
  63         bool l4_csum;
  64 };
  65
  66 struct crypto_param {
  67         enum rte_crypto_sym_xform_type type;
  68         union {
  69                 enum rte_crypto_cipher_algorithm cipher;
  70                 enum rte_crypto_auth_algorithm auth;
  71                 enum rte_crypto_aead_algorithm aead;
  72         } alg;
  73         uint16_t key_length;
  74         uint16_t digest_length;
  75 };
  76
  77 static const struct crypto_param aead_list[] = {
  78         {
  79                 .type = RTE_CRYPTO_SYM_XFORM_AEAD,
  80                 .alg.aead =  RTE_CRYPTO_AEAD_AES_GCM,
  81                 .key_length = 16,
  82         },
  83         {
  84                 .type = RTE_CRYPTO_SYM_XFORM_AEAD,
  85                 .alg.aead = RTE_CRYPTO_AEAD_AES_GCM,
  86                 .key_length = 24,
  87         },
  88         {
  89                 .type = RTE_CRYPTO_SYM_XFORM_AEAD,
  90                 .alg.aead = RTE_CRYPTO_AEAD_AES_GCM,
  91                 .key_length = 32
  92         },
  93 };
  94
  95 static const struct crypto_param cipher_list[] = {
  96         {
  97                 .type = RTE_CRYPTO_SYM_XFORM_CIPHER,
  98                 .alg.cipher =  RTE_CRYPTO_CIPHER_AES_CBC,
  99                 .key_length = 16,
 100         },
 101 };
 102
 103 static const struct crypto_param auth_list[] = {
 104         {
 105                 .type = RTE_CRYPTO_SYM_XFORM_AUTH,
 106                 .alg.auth =  RTE_CRYPTO_AUTH_NULL,
 107         },
 108         {
 109                 .type = RTE_CRYPTO_SYM_XFORM_AUTH,
 110                 .alg.auth =  RTE_CRYPTO_AUTH_SHA256_HMAC,
 111                 .key_length = 32,
 112                 .digest_length = 16,
 113         },
 114 };
 115
 116 struct crypto_param_comb {
 117         const struct crypto_param *param1;
 118         const struct crypto_param *param2;
 119 };
 120
 121 extern struct ipsec_test_data pkt_aes_256_gcm;
 122 extern struct ipsec_test_data pkt_aes_128_cbc_hmac_sha256;
 123
 124 extern struct crypto_param_comb alg_list[RTE_DIM(aead_list) +
 125                                          (RTE_DIM(cipher_list) *
 126                                           RTE_DIM(auth_list))];
 127
 128 void test_ipsec_alg_list_populate(void);
 129
 130 int test_ipsec_sec_caps_verify(struct rte_security_ipsec_xform *ipsec_xform,
 131                                const struct rte_security_capability *sec_cap,
 132                                bool silent);
 133
 134 int test_ipsec_crypto_caps_aead_verify(
 135                 const struct rte_security_capability *sec_cap,
 136                 struct rte_crypto_sym_xform *aead);
 137
 138 int test_ipsec_crypto_caps_cipher_verify(
 139                 const struct rte_security_capability *sec_cap,
 140                 struct rte_crypto_sym_xform *cipher);
 141
 142 int test_ipsec_crypto_caps_auth_verify(
 143                 const struct rte_security_capability *sec_cap,
 144                 struct rte_crypto_sym_xform *auth);
 145
 146 void test_ipsec_td_in_from_out(const struct ipsec_test_data *td_out,
 147                                struct ipsec_test_data *td_in);
 148
 149 void test_ipsec_td_prepare(const struct crypto_param *param1,
 150                            const struct crypto_param *param2,
 151                            const struct ipsec_test_flags *flags,
 152                            struct ipsec_test_data *td_array,
 153                            int nb_td);
 154
 155 void test_ipsec_td_update(struct ipsec_test_data td_inb[],
 156                           const struct ipsec_test_data td_outb[],
 157                           int nb_td,
 158                           const struct ipsec_test_flags *flags);
 159
 160 void test_ipsec_display_alg(const struct crypto_param *param1,
 161                             const struct crypto_param *param2);
 162
 163 int test_ipsec_post_process(struct rte_mbuf *m,
 164                             const struct ipsec_test_data *td,
 165                             struct ipsec_test_data *res_d, bool silent,
 166                             const struct ipsec_test_flags *flags);
 167
 168 int test_ipsec_status_check(struct rte_crypto_op *op,
 169                             const struct ipsec_test_flags *flags,
 170                             enum rte_security_ipsec_sa_direction dir,
 171                             int pkt_num);
 172
 173 #endif