[PATCH net-next v5 0/7] Add MACsec support for TJA11XX C45 PHYs
From: Radu Pirea (NXP OSS)
Date: Wed Sep 20 2023 - 05:23:10 EST
This is the MACsec support for TJA11XX PHYs. The MACsec block encrypts
the ethernet frames on the fly and has no buffering. This operation will
grow the frames by 32 bytes. If the frames are sent back to back, the
MACsec block will not have enough room to insert the SecTAG and the ICV
and the frames will be dropped.
To mitigate this, the PHY can parse a specific ethertype with some
padding bytes and replace them with the SecTAG and ICV. These padding
bytes might be dummy or might contain information about TX SC that must
be used to encrypt the frame.
Radu P.
Radu Pirea (NXP OSS) (7):
net: macsec: move sci_to_cpu to macsec header
net: macsec: documentation for macsec_context and macsec_ops
net: macsec: indicate next pn update when offloading
net: macsec: introduce mdo_insert_tx_tag
net: phy: nxp-c45-tja11xx: add MACsec support
net: phy: nxp-c45-tja11xx: add MACsec statistics
net: phy: nxp-c45-tja11xx: implement mdo_insert_tx_tag
MAINTAINERS | 2 +-
drivers/net/macsec.c | 94 +-
drivers/net/netdevsim/macsec.c | 5 -
drivers/net/phy/Kconfig | 2 +-
drivers/net/phy/Makefile | 6 +-
drivers/net/phy/nxp-c45-tja11xx-macsec.c | 1724 ++++++++++++++++++++++
drivers/net/phy/nxp-c45-tja11xx.c | 77 +-
drivers/net/phy/nxp-c45-tja11xx.h | 62 +
include/net/macsec.h | 55 +
9 files changed, 1988 insertions(+), 39 deletions(-)
create mode 100644 drivers/net/phy/nxp-c45-tja11xx-macsec.c
create mode 100644 drivers/net/phy/nxp-c45-tja11xx.h
--
2.34.1