Added command-line options to specify total number of processes and
current process ID. Each process owns subset of Rx and Tx queues.
+* **Updated test-crypto-perf application with new cases.**
+
+ * Added support for asymmetric crypto throughput performance measurement.
+ Only modex is supported for now.
+
+* **Added lookaside protocol (IPsec) tests in dpdk-test.**
+
+ * Added known vector tests (AES-GCM 128, 192, 256).
+ * Added tests to verify error reporting with ICV corruption.
+ * Added tests to verify IV generation.
+ * Added tests to verify UDP encapsulation.
+ * Added tests to validate packets soft expiry.
+ * Added tests to validate packets hard expiry.
+
Removed Items
-------------
as it is for drivers only and should be private to DPDK, and not
installed for app use.
+* cryptodev: A ``reserved`` byte from structure ``rte_crypto_op`` was
+ renamed to ``aux_flags`` to indicate warnings and other information from
+ the crypto/security operation. This field will be used to communicate
+ events such as soft expiry with IPsec in lookaside mode.
+
ABI Changes
-----------
have much processing in PMD specific callbacks but just 64-bit set/get.
This avoids a per packet function pointer jump overhead for such PMDs.
+* security: A new option ``iv_gen_disable`` was added in structure
+ ``rte_security_ipsec_sa_options`` to disable IV generation inside PMD,
+ so that application can provide its own IV and test known test vectors.
+
+* security: A new structure ``rte_security_ipsec_lifetime`` was added to
+ replace ``esn_soft_limit`` in IPsec configuration structure
+ ``rte_security_ipsec_xform`` to allow applications to configure SA soft
+ and hard expiry limits. Limits can be either in number of packets or bytes.
+
Known Issues
------------