Hi all, Intel released IPsec-MB 3.0.0 on October 1: https://github.com/intel/intel-ipsec-mb/releases/tag/v3.0.0
VPP currently uses 2.0.2. The 2.0 series remains supported for security updates, so there is no immediate migration urgency. An initial source review suggests that upgrading would require more than a version bump: - The legacy Makefile build has been removed; the external package build would need to use CMake. - IMB_MGR is now opaque. VPP currently accesses its function pointers directly for AES-GCM, key expansion and HMAC preparation, so these paths would need to move to the public APIs. - The release adds AVX10 support, an additional AVX2 AES-CBC implementation, and correctness fixes. Performance improvements for VPP would need benchmarking; a general AES-GCM speedup is not established. Is anyone already looking into this upgrade? Would it make sense to evaluate it for the 27.02 cycle? Input from anyone interested—including crypto, IPsec, host stack, build and CSIT maintainers—would be welcome, particularly on compatibility and useful performance scenarios. Thanks, Jérôme
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#27259): https://lists.fd.io/g/vpp-dev/message/27259 Mute This Topic: https://lists.fd.io/mt/121719496/21656 Group Owner: [email protected] Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/14379924/21656/631435203/xyzzy [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
