ipsec_crypto/odp_ipsec_cache.h

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright (c) 2014-2018 Linaro Limited
 */
 
#ifndef ODP_IPSEC_CACHE_H_
#define ODP_IPSEC_CACHE_H_
 
#ifdef __cplusplus
extern "C" {
#endif
 
#include <odp_api.h>
#include <odp/helper/ipsec.h>
 
#include <odp_ipsec_misc.h>
#include <odp_ipsec_sa_db.h>
 
typedef enum {
    CRYPTO_API_SYNC,              
    CRYPTO_API_ASYNC,             
} crypto_api_mode_e;
 
typedef struct ipsec_cache_entry_s {
    struct ipsec_cache_entry_s  *next;        
    odp_bool_t                   async;       
    int                          sa_flags;
    uint32_t                     src_ip;      
    uint32_t                     dst_ip;      
    sa_mode_t            mode;        
    uint32_t                     tun_src_ip;  
    uint32_t                     tun_dst_ip;  
    struct {
        odp_cipher_alg_t     alg;         
        uint32_t             spi;         
        uint32_t             block_len;   
        uint32_t             iv_len;      
        ipsec_key_t          key;         
    } esp;
    struct {
        odp_auth_alg_t       alg;         
        uint32_t             spi;         
        uint32_t             icv_len;     
        ipsec_key_t          key;         
    } ah;
 
    /* Per SA state */
    struct {
        odp_crypto_session_t session;  
        uint32_t      esp_seq;         
        uint32_t      ah_seq;          
        odp_u16be_t    tun_hdr_id;     
    } state;
} ipsec_cache_entry_t;
 
typedef struct ipsec_cache_s {
    uint32_t             index;       
    ipsec_cache_entry_t *in_list;     
    ipsec_cache_entry_t *out_list;    
    ipsec_cache_entry_t  array[MAX_DB]; 
} ipsec_cache_t;
 
extern ipsec_cache_t *ipsec_cache;
 
void init_ipsec_cache(void);
 
int create_ipsec_cache_entry(sa_db_entry_t *cipher_sa,
                 sa_db_entry_t *auth_sa,
                 tun_db_entry_t *tun,
                 crypto_api_mode_e api_mode,
                 odp_bool_t in,
                 odp_queue_t completionq);
 
ipsec_cache_entry_t *find_ipsec_cache_entry_in(uint32_t src_ip,
                           uint32_t dst_ip,
                           odph_ahhdr_t *ah,
                           odph_esphdr_t *esp);
 
ipsec_cache_entry_t *find_ipsec_cache_entry_out(uint32_t src_ip,
                        uint32_t dst_ip,
                        uint8_t proto);
 
int destroy_ipsec_cache(void);
 
#ifdef __cplusplus
}
#endif
 
#endif