* Added Transport mode support in lookaside protocol (IPsec) for CN10K.
* Added UDP encapsulation support in lookaside protocol (IPsec) for CN10K.
* Added support for lookaside protocol (IPsec) offload for CN9K.
+ * Added support for ZUC algorithm with 256-bit key length for CN10K.
* **Added support for event crypto adapter on Marvell CN10K and CN9K.**
* Added tests to verify error reporting with ICV corruption.
* Added tests to verify IV generation.
* Added tests to verify UDP encapsulation.
+ * Added tests to verify UDP encapsulation ports.
* Added tests to validate packets soft expiry.
* Added tests to validate packets hard expiry.
* Added tests to verify tunnel header verification in IPsec inbound.
``rte_security_ipsec_sa_options`` to indicate whether outer header
verification need to be done as part of inbound IPsec processing.
+* security: A new option ``udp_ports_verify`` was added in structure
+ ``rte_security_ipsec_sa_options`` to indicate whether UDP ports
+ verification need to be done as part of inbound IPsec processing.
+
* security: A new structure ``rte_security_ipsec_lifetime`` was added to
replace ``esn_soft_limit`` in IPsec configuration structure
``rte_security_ipsec_xform`` to allow applications to configure SA soft
and hard expiry limits. Limits can be either in number of packets or bytes.
+* bbdev: Added capability related to more comprehensive CRC options,
+ shifting values of the ``enum rte_bbdev_op_ldpcdec_flag_bitmasks``.
+
Known Issues
------------