5. Broadcom FlexSparc Crypto Poll Mode Driver
The FlexSparc crypto poll mode driver (BCMFS PMD) provides support for offloading cryptographic operations to the Broadcom SoCs having FlexSparc4 unit. Detailed information about SoCs can be found at Broadcom Official Website.
5.1. Supported Broadcom SoCs
- Stingray
5.2. Features
The BCMFS PMD has support for below symmetric algorithms:
Cipher algorithms:
RTE_CRYPTO_CIPHER_3DES_CBC
RTE_CRYPTO_CIPHER_3DES_CTR
RTE_CRYPTO_CIPHER_AES128_CBC
RTE_CRYPTO_CIPHER_AES192_CBC
RTE_CRYPTO_CIPHER_AES256_CBC
RTE_CRYPTO_CIPHER_AES128_CTR
RTE_CRYPTO_CIPHER_AES192_CTR
RTE_CRYPTO_CIPHER_AES256_CTR
RTE_CRYPTO_CIPHER_AES_XTS
RTE_CRYPTO_CIPHER_DES_CBC
Hash algorithms:
RTE_CRYPTO_AUTH_SHA1
RTE_CRYPTO_AUTH_SHA1_HMAC
RTE_CRYPTO_AUTH_SHA224
RTE_CRYPTO_AUTH_SHA224_HMAC
RTE_CRYPTO_AUTH_SHA256
RTE_CRYPTO_AUTH_SHA256_HMAC
RTE_CRYPTO_AUTH_SHA384
RTE_CRYPTO_AUTH_SHA384_HMAC
RTE_CRYPTO_AUTH_SHA512
RTE_CRYPTO_AUTH_SHA512_HMAC
RTE_CRYPTO_AUTH_AES_XCBC_MAC
RTE_CRYPTO_AUTH_MD5_HMAC
RTE_CRYPTO_AUTH_AES_GMAC
RTE_CRYPTO_AUTH_AES_CMAC
Supported AEAD algorithms:
RTE_CRYPTO_AEAD_AES_GCM
5.3. Installation
Information about kernel, rootfs and toolchain can be found at Broadcom Official Website.
Note
To execute BCMFS PMD, it must be compiled with VFIO_PRESENT flag on the compiling platform and same gets enabled in rte_vfio.h.
The BCMFS PMD may be compiled natively on a Stingray platform or cross-compiled on an x86 platform. For example, below commands can be executed for cross compiling on x86 platform.
cd <DPDK-source-directory>
meson setup <dest-dir> --cross-file config/arm/arm64_stingray_linux_gcc
cd <dest-dir>
ninja
5.4. Initialization
The supported platform devices should be present in the /sys/bus/platform/devices/fs<version>/<dev_name> path on the booted kernel. To get BCMFS PMD executing, device node must be owned by VFIO platform module only. For example, below commands can be run to get hold of a device node by VFIO.
SETUP_SYSFS_DEV_NAME=67000000.crypto_mbox
io_device_name="vfio-platform"
echo $io_device_name > /sys/bus/platform/devices/${SETUP_SYSFS_DEV_NAME}/driver_override
echo ${SETUP_SYSFS_DEV_NAME} > /sys/bus/platform/drivers_probe
5.5. Limitations
- The session-oriented APIs are supported but the session-less APIs are not.
- CCM is not supported.
5.6. Testing
The symmetric crypto operations on BCMFS PMD may be verified by running the test application:
./dpdk-test
RTE>>cryptodev_bcmfs_autotest