Cryptodev and Security Library Updates in DPDK
summary
DPDK adds concrete crypto and protocol offloads: MACsec offload with an L2 forward example hitting line rate on Marvell CN10K, TLS/DTLS record processing offload, and new algorithms including SM2/SM3/SM4 and SHAKE. A new RX inject API (added in 23.11 with unit tests) lets an application reassemble fragmented IPsec packets and push them back to the datapath; Octeon/Marvell PMDs support it and dedicating one reinject worker core preserves the same main-worker throughput.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:52RT crypto library overview
- 3:19New crypto algorithms
- 4:22RT security library updates
- 8:57MACsec protocol support
- 9:17TLS/DTLS record processing
- 13:16Inline IP reassembly
- 15:27RX inject API introduction
- 20:07RX inject API details
- 28:54Q&A session
related talks
30mAccelerate TLS with DPDK
13mNew Asymmetric Crypto Algorithm in DPDK - EdDSA
24mOpenSSL Crypto PMD - Analysis and Optimisations
28mModernizing Kernel Cryptography: From Complex APIs To Streamlined Libraries
22mBoosting the Network Performance of Confidential VM Using Userspace Stack
27msRDMA -- Efficient NIC-based Authentication and Encryption for Remote Direct Memory
30mFacing Extinction: The Fight To Keep Hardware Crypto Engines in Embedded Linux
27mSpeeding Up Linux Disk Encryption