esp_decrypt.c File Reference

Include dependency graph for esp_decrypt.c:

Go to the source code of this file.

Data Structures
struct	esp_decrypt_trace_t

Macros
#define	ESP_WINDOW_SIZE   64
#define	foreach_esp_decrypt_next
#define	foreach_esp_decrypt_error

Enumerations
enum	esp_decrypt_next_t { ESP_DECRYPT_N_NEXT }
enum	esp_decrypt_error_t { ESP_DECRYPT_N_ERROR }

Functions
static u8 *	format_esp_decrypt_trace (u8 *s, va_list *args)
static void	esp_decrypt_aes_cbc (ipsec_crypto_alg_t alg, u8 *in, u8 *out, size_t in_len, u8 *key, u8 *iv)
static int	esp_replay_check (ipsec_sa_t *sa, u32 seq)
static int	esp_replay_check_esn (ipsec_sa_t *sa, u32 seq)
static void	esp_replay_advance (ipsec_sa_t *sa, u32 seq)
static void	esp_replay_advance_esn (ipsec_sa_t *sa, u32 seq)
static uword	esp_decrypt_node_fn (vlib_main_t *vm, vlib_node_runtime_t *node, vlib_frame_t *from_frame)

Variables
static char *	esp_decrypt_error_strings []
vlib_node_registration_t	esp_decrypt_node
	(constructor) VLIB_REGISTER_NODE (esp_decrypt_node) More...

Macro Definition Documentation

#define ESP_WINDOW_SIZE   64

Definition at line 25 of file esp_decrypt.c.

#define foreach_esp_decrypt_error

Value:

_(RX_PKTS, "ESP pkts received")                    \
 _(NO_BUFFER, "No buffer (packed dropped)")         \
 _(DECRYPTION_FAILED, "ESP decryption failed")      \
 _(INTEG_ERROR, "Integrity check failed")           \
 _(REPLAY, "SA replayed packet")                    \
 _(NOT_IP, "Not IP packet (dropped)")

Definition at line 42 of file esp_decrypt.c.

#define foreach_esp_decrypt_next

Value:

_(DROP, "error-drop")                           \
_(IP4_INPUT, "ip4-input")                       \
_(IP6_INPUT, "ip6-input")                       \
_(IPSEC_GRE_INPUT, "ipsec-gre-input")

Definition at line 27 of file esp_decrypt.c.

Enumeration Type Documentation

enum esp_decrypt_error_t

Enumerator
ESP_DECRYPT_N_ERROR

Definition at line 51 of file esp_decrypt.c.

enum esp_decrypt_next_t

Enumerator
ESP_DECRYPT_N_NEXT

Definition at line 34 of file esp_decrypt.c.

Function Documentation

static void esp_decrypt_aes_cbc ( ipsec_crypto_alg_t  alg, u8 *  in, u8 *  out, size_t  in_len, u8 *  key, u8 *  iv  )

inlinestatic

Definition at line 86 of file esp_decrypt.c.

Here is the call graph for this function:

Here is the caller graph for this function:

static uword esp_decrypt_node_fn ( vlib_main_t *  vm, vlib_node_runtime_t *  node, vlib_frame_t *  from_frame  )

static

Definition at line 232 of file esp_decrypt.c.

Here is the call graph for this function:

static void esp_replay_advance ( ipsec_sa_t *  sa, u32  seq  )

inlinestatic

Definition at line 174 of file esp_decrypt.c.

Here is the caller graph for this function:

static void esp_replay_advance_esn ( ipsec_sa_t *  sa, u32  seq  )

inlinestatic

Definition at line 195 of file esp_decrypt.c.

Here is the caller graph for this function:

static int esp_replay_check ( ipsec_sa_t *  sa, u32  seq  )

inlinestatic

Definition at line 113 of file esp_decrypt.c.

Here is the caller graph for this function:

static int esp_replay_check_esn ( ipsec_sa_t *  sa, u32  seq  )

inlinestatic

Definition at line 131 of file esp_decrypt.c.

Here is the caller graph for this function:

static u8* format_esp_decrypt_trace ( u8 *  s, va_list *  args  )

static

Definition at line 73 of file esp_decrypt.c.

Here is the call graph for this function:

Variable Documentation

char* esp_decrypt_error_strings[]

static

Initial value:

= {
#define _(sym,string) 
  foreach_esp_decrypt_error

}

Definition at line 59 of file esp_decrypt.c.

vlib_node_registration_t esp_decrypt_node

Initial value:

= {
  .function = esp_decrypt_node_fn,
  .name = "esp-decrypt",
  .vector_size = sizeof (u32),
  .format_trace = format_esp_decrypt_trace,
  .type = VLIB_NODE_TYPE_INTERNAL,

  .n_errors = ARRAY_LEN(esp_decrypt_error_strings),
  .error_strings = esp_decrypt_error_strings,

  .n_next_nodes = ESP_DECRYPT_N_NEXT,
  .next_nodes = {
#define _(s,n) 
    foreach_esp_decrypt_next

  },
}

(constructor) VLIB_REGISTER_NODE (esp_decrypt_node)

Definition at line 522 of file esp_decrypt.c.