107 lines
3.1 KiB
Diff
107 lines
3.1 KiB
Diff
From 40c139664439b2576e1506fbca14a7b79425a9dd Mon Sep 17 00:00:00 2001
|
|
Message-ID: <40c139664439b2576e1506fbca14a7b79425a9dd.1706279171.git.davide.caratti@gmail.com>
|
|
From: Emeel Hakim <ehakim@nvidia.com>
|
|
Date: Tue, 14 Feb 2023 10:26:57 +0200
|
|
Subject: [PATCH] macsec_linux: Add support for MACsec hardware offload
|
|
|
|
This uses libnl3 to communicate with the macsec module available on
|
|
Linux. A recent enough version of libnl is needed for the hardware
|
|
offload support.
|
|
|
|
Signed-off-by: Emeel Hakim <ehakim@nvidia.com>
|
|
---
|
|
src/drivers/driver_macsec_linux.c | 49 +++++++++++++++++++++++++++++++
|
|
1 file changed, 49 insertions(+)
|
|
|
|
diff --git a/src/drivers/driver_macsec_linux.c b/src/drivers/driver_macsec_linux.c
|
|
index b609bbf38..c79e8733a 100644
|
|
--- a/src/drivers/driver_macsec_linux.c
|
|
+++ b/src/drivers/driver_macsec_linux.c
|
|
@@ -32,6 +32,10 @@
|
|
|
|
#define UNUSED_SCI 0xffffffffffffffff
|
|
|
|
+#if LIBNL_VER_NUM >= LIBNL_VER(3, 6)
|
|
+#define LIBNL_HAS_OFFLOAD
|
|
+#endif
|
|
+
|
|
struct cb_arg {
|
|
struct macsec_drv_data *drv;
|
|
u32 *pn;
|
|
@@ -73,6 +77,11 @@ struct macsec_drv_data {
|
|
bool replay_protect;
|
|
bool replay_protect_set;
|
|
|
|
+#ifdef LIBNL_HAS_OFFLOAD
|
|
+ enum macsec_offload offload;
|
|
+ bool offload_set;
|
|
+#endif /* LIBNL_HAS_OFFLOAD */
|
|
+
|
|
u32 replay_window;
|
|
|
|
u8 encoding_sa;
|
|
@@ -228,6 +237,15 @@ static int try_commit(struct macsec_drv_data *drv)
|
|
drv->replay_window);
|
|
}
|
|
|
|
+#ifdef LIBNL_HAS_OFFLOAD
|
|
+ if (drv->offload_set) {
|
|
+ wpa_printf(MSG_DEBUG, DRV_PREFIX
|
|
+ "%s: try_commit offload=%d",
|
|
+ drv->ifname, drv->offload);
|
|
+ rtnl_link_macsec_set_offload(drv->link, drv->offload);
|
|
+ }
|
|
+#endif /* LIBNL_HAS_OFFLOAD */
|
|
+
|
|
if (drv->encoding_sa_set) {
|
|
wpa_printf(MSG_DEBUG, DRV_PREFIX
|
|
"%s: try_commit encoding_sa=%d",
|
|
@@ -455,6 +473,36 @@ static int macsec_drv_set_replay_protect(void *priv, bool enabled,
|
|
}
|
|
|
|
|
|
+/**
|
|
+ * macsec_drv_set_offload - Set offload status
|
|
+ * @priv: Private driver interface data
|
|
+ * @offload: 0 = MACSEC_OFFLOAD_OFF
|
|
+ * 1 = MACSEC_OFFLOAD_PHY
|
|
+ * 2 = MACSEC_OFFLOAD_MAC
|
|
+ * Returns: 0 on success, -1 on failure (or if not supported)
|
|
+ */
|
|
+static int macsec_drv_set_offload(void *priv, u8 offload)
|
|
+{
|
|
+#ifdef LIBNL_HAS_OFFLOAD
|
|
+ struct macsec_drv_data *drv = priv;
|
|
+
|
|
+ wpa_printf(MSG_DEBUG, "%s -> %02" PRIx8, __func__, offload);
|
|
+
|
|
+ drv->offload_set = true;
|
|
+ drv->offload = offload;
|
|
+
|
|
+ return try_commit(drv);
|
|
+#else /* LIBNL_HAS_OFFLOAD */
|
|
+ if (offload == 0)
|
|
+ return 0;
|
|
+ wpa_printf(MSG_INFO,
|
|
+ "%s: libnl version does not include support for MACsec offload",
|
|
+ __func__);
|
|
+ return -1;
|
|
+#endif /* LIBNL_HAS_OFFLOAD */
|
|
+}
|
|
+
|
|
+
|
|
/**
|
|
* macsec_drv_set_current_cipher_suite - Set current cipher suite
|
|
* @priv: Private driver interface data
|
|
@@ -1648,6 +1696,7 @@ const struct wpa_driver_ops wpa_driver_macsec_linux_ops = {
|
|
.enable_protect_frames = macsec_drv_enable_protect_frames,
|
|
.enable_encrypt = macsec_drv_enable_encrypt,
|
|
.set_replay_protect = macsec_drv_set_replay_protect,
|
|
+ .set_offload = macsec_drv_set_offload,
|
|
.set_current_cipher_suite = macsec_drv_set_current_cipher_suite,
|
|
.enable_controlled_port = macsec_drv_enable_controlled_port,
|
|
.get_receive_lowest_pn = macsec_drv_get_receive_lowest_pn,
|
|
--
|
|
2.43.0
|
|
|