bpf: make common crypto API for TC/XDP programs

Browse source

Add crypto API support to BPF to be able to decrypt or encrypt packets
in TC/XDP BPF programs. Special care should be taken for initialization
part of crypto algo because crypto alloc) doesn't work with preemtion
disabled, it can be run only in sleepable BPF program. Also async crypto
is not supported because of the very same issue - TC/XDP BPF programs
are not sleepable.

Signed-off-by: Vadim Fedorenko <vadfed@meta.com>
Link: https://lore.kernel.org/r/20240422225024.2847039-2-vadfed@meta.com
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>

...

This commit is contained in:

Vadim Fedorenko 2024-04-22 15:50:21 -07:00 • committed by Martin KaFai Lau

parent 95c07d5825

commit 3e1c6f3540

6 changed files with 415 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

include/linux/bpf.h

View file

24

include/linux/bpf_crypto.h

View file

3

kernel/bpf/Makefile

View file

385

kernel/bpf/crypto.c

View file

2

kernel/bpf/helpers.c

View file

1

kernel/bpf/verifier.c

View file