> Hi Akhil, > > Thank you for your question about PMD support for the SM4-CBC and SM3-HMAC > combination. > The SM4-CBC + SM3-HMAC algorithm combination is supported by the following > PMDs in DPDK: > 1. QAT PMD (Intel QuickAssist Technology) > Hardware accelerated crypto operations > Full support for both SM4-CBC and SM3-HMAC > Recommended for production environments with QAT hardware > 2. AESNI-MB PMD (Intel Multi-Buffer Crypto) > CPU-based implementation using Intel AES-NI instructions > Supports both SM4-CBC and SM3-HMAC algorithms > Suitable for Intel CPUs without dedicated crypto hardware > 3. CN10K/CN20K PMD (Marvell Octeon) > Hardware accelerated support for Chinese crypto algorithms > Full SM4-CBC and SM3-HMAC support > The patch implementation in examples/ipsec-secgw adds the algorithm > definitions and parsing support, making it compatible with any PMD that > supports > these algorithms. Users can choose to use the appropriate PMD based on their > hardware availability: > For QAT: --vdev crypto_qat > For AESNI-MB: --vdev crypto_aesni_mb (default on Intel CPUs) > For CN10K: Platform-specific driver > Example configuration with QAT PMD: > ./build/examples/ipsec-secgw -l 0-3 -n 4 --vdev crypto_qat -- -p 0x3 -u 0x1 -- > config="(0,0,qat_device0)" -f ep0.cfg > > SA configuration example: > sa out 30 cipher_algo sm4-cbc cipher_key > 01:23:45:67:89:ab:cd:ef:fe:dc:ba:98:76:54:32:10 auth_algo sm3-hmac auth_key > 01:23:45:67:89:ab:cd:ef:fe:dc:ba:98:76:54:32:10:11:22:33:44 mode ipv4-tunnel > src 172.16.1.5 dst 172.16.2.5 > > The implementation follows the same pattern as existing algorithms and > integrates seamlessly with the current IPsec framework. > Acked-by: Akhil Goyal <[email protected]>
Applied to dpdk-next-crypto
