atlantic/macsec/macsec_struct.h

1 /* SPDX-License-Identifier: GPL-2.0-only */
10  *  table.
21 	/*! The match mask is per-nibble. 0 means don't care, i.e. every value
43  *  Classifier table.
122 	/*! Mask is per-byte.
142 	/*! Mask is per-byte.
151 	/*! Mask is per-byte.
156 	/*! Mask is per-byte.
171 	/*! Mask is per-byte.
176 	/*! Mask is per-byte.
181 	/*! Mask is per-byte. */
185 	/*! 1: For explicit sectag case use TCI_SC from table
189 	/*! 1: For explicit sectag case,use TCI_V,ES,SCB,E,C from table
195 	/*! If packet matches and tagged as controlled-packet, this SC/SA
196 	 *  index is used for later SC and SA table lookup.
220 	 *     un-control packet.
231 /*! Represents the bitfields of a single row in the Egress SC Lookup table. */
255 	 *  [[Values of 0, 4, 8-50].
269 	 *  1: SW updates this entry, when programming the SC Table.
273 	 *  00 - 128bits
274 	 *  01 - 192bits
275 	 *  10 - 256bits
276 	 *  11 - Reserved.
285 /*! Represents the bitfields of a single row in the Egress SA Lookup table. */
310  *  Lookup table.
313 	/*! Key for AES-GCM processing. */
317 /*! Represents the bitfields of a single row in the Ingress Pre-MACSec
318  *  CTL Filter table.
329 	/*! The match mask is per-nibble. 0 means don't care, i.e. every
350 /*! Represents the bitfields of a single row in the Ingress Pre-MACSec
351  *  Packet Classifier table.
379 	/*! 0: this is to compare with non-LPBK packet
381 	 *  This value is used to compare with a controlled-tag which goes
399 	 *    can either ping-pong buffer 2 SA by using only the AN[0] bit.
415 	/*! Mask is per-byte.
420 	/*! Mask is per-byte.
428 	/*! Mask is per-byte.
438 	/*! Mask is per-byte.
443 	/*! Mask is per-byte.
452 	/*! If packet matches and tagged as controlled-packet. This SC/SA
453 	 *  index is used for later SC and SA table lookup.
466 	 *     by post-classification.
470 	/*! 0: This is a controlled-port packet if matched.
471 	 *  1: This is an uncontrolled-port packet if matched.
474 	/*! Use the SCI value from the Table if 'SC' bit of the input
486 /*! Represents the bitfields of a single row in the Ingress SC Lookup table. */
501 	/*! This is to specify the window range for anti-replay. Default is 0.
531 /*! Represents the bitfields of a single row in the Ingress SA Lookup table. */
538 	 *  anti-replay.
563  *  Lookup table.
566 	/*! Key for AES-GCM processing. */
569 	 *  00 - 128bits
570 	 *  01 - 192bits
571 	 *  10 - 256bits
572 	 *  11 - reserved.
577 /*! Represents the bitfields of a single row in the Ingress Post-
578  *  MACSec Packet Classifier table.
667 /*! Represents the bitfields of a single row in the Ingress Post-
668  *  MACSec CTL Filter table.
679 	/*! The match mask is per-nibble. 0 means don't care, i.e. every
748 	 *  in the Egress Packet Classifier table.
751 	/*! The number of transmitted packets where the SC table entry has
759 	/*! The number of transmitted packets for which table memory was
764 	 *  the Egress Packet Classifier table has action=drop.
779 	 *  packets encrypted or the matched row in the Ingress SC Lookup
780 	 *  table has validate_frames=Strict.
785 	 *  Ingress SC Lookup table has validate_frames!=Strict.
791 	 *  Lookup table has validate_frames=Strict or the packets
797 	 *  Lookup table has validate_frames=Check.
804 	 *  SC Lookup table has replay_protect=1 and the PN of the packet
814 	 *  - the matched row in the Ingress SC Lookup table has
816 	 *  - the matched row in the Ingress SC Lookup table has
819 	 *  - the matched row in the Ingress SC Lookup table has
842 	 *  (SecTAG), not matching any rows in the Ingress Pre-MACSec
843 	 *  Packet Classifier table.
847 	 *  (SecTAG), not matching any rows in the Ingress Pre-MACSec
848 	 *  Packet Classifier table.
853 	 *  SC Lookup table having validate_frames=Strict.
857 	 *  (SecTAG) and with the matched row in the Ingress SC Lookup
858 	 *  table having validate_frames!=Strict.
867 	 *  the matched row in the Ingress SC Lookup table has
872 	 *  The matched row in the Ingress SC Lookup table has
877 	 *  that passed the Ingress Post-MACSec Packet Classifier table
882 	 *  service that passed the Ingress Post-MACSec Packet Classifier
883 	 *  table check.
887 	 *  that failed the Ingress Post-MACSec Packet Classifier table
892 	 *  service that failed the Ingress Post-MACSec Packet Classifier
893 	 *  table check.
901 	 *  Ingress Post-MACSec CTL Filter table.
904 	/*! The number of received packets for which table memory was