doc/guides/cryptodevs/openssl.rst

   1 ..  SPDX-License-Identifier: BSD-3-Clause
   2     Copyright(c) 2016 Intel Corporation.
   3
   4 OpenSSL Crypto Poll Mode Driver
   5 ===============================
   6
   7 This code provides the initial implementation of the openssl poll mode
   8 driver. All cryptography operations are using Openssl library crypto API.
   9 Each algorithm uses EVP interface from openssl API - which is recommended
  10 by Openssl maintainers.
  11
  12 For more details about openssl library please visit openssl webpage:
  13 https://www.openssl.org/
  14
  15 Features
  16 --------
  17
  18 OpenSSL PMD has support for:
  19
  20 Supported cipher algorithms:
  21
  22 * ``RTE_CRYPTO_CIPHER_3DES_CBC``
  23 * ``RTE_CRYPTO_CIPHER_AES_CBC``
  24 * ``RTE_CRYPTO_CIPHER_AES_CTR``
  25 * ``RTE_CRYPTO_CIPHER_3DES_CTR``
  26 * ``RTE_CRYPTO_CIPHER_DES_DOCSISBPI``
  27
  28 Supported authentication algorithms:
  29
  30 * ``RTE_CRYPTO_AUTH_AES_GMAC``
  31 * ``RTE_CRYPTO_AUTH_MD5``
  32 * ``RTE_CRYPTO_AUTH_SHA1``
  33 * ``RTE_CRYPTO_AUTH_SHA224``
  34 * ``RTE_CRYPTO_AUTH_SHA256``
  35 * ``RTE_CRYPTO_AUTH_SHA384``
  36 * ``RTE_CRYPTO_AUTH_SHA512``
  37 * ``RTE_CRYPTO_AUTH_MD5_HMAC``
  38 * ``RTE_CRYPTO_AUTH_SHA1_HMAC``
  39 * ``RTE_CRYPTO_AUTH_SHA224_HMAC``
  40 * ``RTE_CRYPTO_AUTH_SHA256_HMAC``
  41 * ``RTE_CRYPTO_AUTH_SHA384_HMAC``
  42 * ``RTE_CRYPTO_AUTH_SHA512_HMAC``
  43
  44 Supported AEAD algorithms:
  45
  46 * ``RTE_CRYPTO_AEAD_AES_GCM``
  47 * ``RTE_CRYPTO_AEAD_AES_CCM``
  48
  49 Supported Asymmetric Crypto algorithms:
  50
  51 * ``RTE_CRYPTO_ASYM_XFORM_RSA``
  52 * ``RTE_CRYPTO_ASYM_XFORM_DSA``
  53 * ``RTE_CRYPTO_ASYM_XFORM_DH``
  54 * ``RTE_CRYPTO_ASYM_XFORM_MODINV``
  55 * ``RTE_CRYPTO_ASYM_XFORM_MODEX``
  56
  57
  58 Installation
  59 ------------
  60
  61 To compile openssl PMD, it has to be enabled in the config/common_base file
  62 and appropriate openssl packages have to be installed in the build environment.
  63
  64 The newest openssl library version is supported:
  65
  66 * 1.0.2h-fips  3 May 2016.
  67
  68 Older versions that were also verified:
  69
  70 * 1.0.1f 6 Jan 2014
  71 * 1.0.1 14 Mar 2012
  72
  73 For Ubuntu 14.04 LTS these packages have to be installed in the build system:
  74
  75 .. code-block:: console
  76
  77     sudo apt-get install openssl
  78     sudo apt-get install libc6-dev-i386 # for i686-native-linux-gcc target
  79
  80 This code was also verified on Fedora 24.
  81 This code has NOT been verified on FreeBSD yet.
  82
  83 Initialization
  84 --------------
  85
  86 User can use app/test application to check how to use this pmd and to verify
  87 crypto processing.
  88
  89 Test name is cryptodev_openssl_autotest.
  90 For asymmetric crypto operations testing, run cryptodev_openssl_asym_autotest.
  91
  92 To verify real traffic l2fwd-crypto example can be used with this command:
  93
  94 .. code-block:: console
  95
  96         sudo ./build/l2fwd-crypto -l 0-1 -n 4 --vdev "crypto_openssl"
  97         --vdev "crypto_openssl"-- -p 0x3 --chain CIPHER_HASH
  98         --cipher_op ENCRYPT --cipher_algo AES_CBC
  99         --cipher_key 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f
 100         --iv 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:ff
 101         --auth_op GENERATE --auth_algo SHA1_HMAC
 102         --auth_key 11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11
 103         :11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11
 104         :11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11:11
 105
 106 Limitations
 107 -----------
 108
 109 * Maximum number of sessions is 2048.
 110 * Chained mbufs are supported only for source mbuf (destination must be
 111   contiguous).
 112 * Hash only is not supported for GCM and GMAC.
 113 * Cipher only is not supported for GCM and GMAC.