X-Git-Url: http://git.droids-corp.org/?a=blobdiff_plain;f=doc%2Fguides%2Fcryptodevs%2Fopenssl.rst;h=848a2e8eb8bf9606df655c8b93a04905bbb19ec1;hb=142778b3702a3acbe8efe2efc17722bfc1a7393d;hp=427fc807c300f690d078de712e2432667fc739a0;hpb=5630257fcc30397e7217139ec55da4f301f59fb7;p=dpdk.git diff --git a/doc/guides/cryptodevs/openssl.rst b/doc/guides/cryptodevs/openssl.rst index 427fc807c3..848a2e8eb8 100644 --- a/doc/guides/cryptodevs/openssl.rst +++ b/doc/guides/cryptodevs/openssl.rst @@ -46,31 +46,25 @@ Supported AEAD algorithms: * ``RTE_CRYPTO_AEAD_AES_GCM`` * ``RTE_CRYPTO_AEAD_AES_CCM`` +Supported Asymmetric Crypto algorithms: -Installation ------------- - -To compile openssl PMD, it has to be enabled in the config/common_base file -and appropriate openssl packages have to be installed in the build environment. - -The newest openssl library version is supported: - -* 1.0.2h-fips 3 May 2016. +* ``RTE_CRYPTO_ASYM_XFORM_RSA`` +* ``RTE_CRYPTO_ASYM_XFORM_DSA`` +* ``RTE_CRYPTO_ASYM_XFORM_DH`` +* ``RTE_CRYPTO_ASYM_XFORM_MODINV`` +* ``RTE_CRYPTO_ASYM_XFORM_MODEX`` -Older versions that were also verified: -* 1.0.1f 6 Jan 2014 -* 1.0.1 14 Mar 2012 - -For Ubuntu 14.04 LTS these packages have to be installed in the build system: +Installation +------------ -.. code-block:: console +To compile the OpenSSL PMD the openssl library must be installed. It will +then be picked up by the Meson/Ninja build system. - sudo apt-get install openssl - sudo apt-get install libc6-dev-i386 # for i686-native-linuxapp-gcc target +To ensure that you have the latest security fixes it is recommended that you +use version 1.1.1g or newer. -This code was also verified on Fedora 24. -This code has NOT been verified on FreeBSD yet. +* 1.1.1g, 2020-Apr-21. https://www.openssl.org/source/ Initialization -------------- @@ -79,13 +73,13 @@ User can use app/test application to check how to use this pmd and to verify crypto processing. Test name is cryptodev_openssl_autotest. -For performance test cryptodev_openssl_perftest can be used. +For asymmetric crypto operations testing, run cryptodev_openssl_asym_autotest. To verify real traffic l2fwd-crypto example can be used with this command: .. code-block:: console - sudo ./build/l2fwd-crypto -l 0-1 -n 4 --vdev "crypto_openssl" + sudo .//examples/dpdk-l2fwd-crypto -l 0-1 -n 4 --vdev "crypto_openssl" --vdev "crypto_openssl"-- -p 0x3 --chain CIPHER_HASH --cipher_op ENCRYPT --cipher_algo AES_CBC --cipher_key 00:01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f