]> www.infradead.org Git - users/hch/misc.git/commit
net/mlx5e: Always start IPsec sequence number from 1
authorLeon Romanovsky <leonro@nvidia.com>
Wed, 15 Jan 2025 11:39:10 +0000 (13:39 +0200)
committerPaolo Abeni <pabeni@redhat.com>
Thu, 16 Jan 2025 11:45:47 +0000 (12:45 +0100)
commit7f95b0247764acd739d949ff247db4b76138e55a
tree6f91d9902b20a7ae7fd86c4ee652898929f1d3f4
parent25f23524dfa227959beb3b2c2c0f38e0222f4cfa
net/mlx5e: Always start IPsec sequence number from 1

According to RFC4303, section "3.3.3. Sequence Number Generation",
the first packet sent using a given SA will contain a sequence
number of 1.

This is applicable to both ESN and non-ESN mode, which was not covered
in commit mentioned in Fixes line.

Fixes: 3d42c8cc67a8 ("net/mlx5e: Ensure that IPsec sequence packet number starts from 1")
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Reviewed-by: Jacob Keller <jacob.e.keller@intel.com>
Signed-off-by: Tariq Toukan <tariqt@nvidia.com>
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c