]> Git Repo - linux.git/commit
net/mlx5e: Always start IPsec sequence number from 1
authorLeon Romanovsky <[email protected]>
Wed, 15 Jan 2025 11:39:10 +0000 (13:39 +0200)
committerPaolo Abeni <[email protected]>
Thu, 16 Jan 2025 11:45:47 +0000 (12:45 +0100)
commit7f95b0247764acd739d949ff247db4b76138e55a
tree6f91d9902b20a7ae7fd86c4ee652898929f1d3f4
parent25f23524dfa227959beb3b2c2c0f38e0222f4cfa
net/mlx5e: Always start IPsec sequence number from 1

According to RFC4303, section "3.3.3. Sequence Number Generation",
the first packet sent using a given SA will contain a sequence
number of 1.

This is applicable to both ESN and non-ESN mode, which was not covered
in commit mentioned in Fixes line.

Fixes: 3d42c8cc67a8 ("net/mlx5e: Ensure that IPsec sequence packet number starts from 1")
Signed-off-by: Leon Romanovsky <[email protected]>
Reviewed-by: Jacob Keller <[email protected]>
Signed-off-by: Tariq Toukan <[email protected]>
Signed-off-by: Paolo Abeni <[email protected]>
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c
This page took 0.0496760000000001 seconds and 4 git commands to generate.