94  * ixgbevf_ipsec_restore - restore the IPsec HW settings after a reset
103 	struct ixgbevf_ipsec *ipsec = adapter->ipsec;  in ixgbevf_ipsec_restore()  local
112 		struct rx_sa *r = &ipsec->rx_tbl[i];  in ixgbevf_ipsec_restore()
113 		struct tx_sa *t = &ipsec->tx_tbl[i];  in ixgbevf_ipsec_restore()
134  * @ipsec: pointer to IPsec struct
140 int ixgbevf_ipsec_find_empty_idx(struct ixgbevf_ipsec *ipsec, bool rxtable)  in ixgbevf_ipsec_find_empty_idx()  argument
145 		if (ipsec->num_rx_sa == IXGBE_IPSEC_MAX_SA_COUNT)  in ixgbevf_ipsec_find_empty_idx()
150 			if (!ipsec->rx_tbl[i].used)  in ixgbevf_ipsec_find_empty_idx()
154 		if (ipsec->num_tx_sa == IXGBE_IPSEC_MAX_SA_COUNT)  in ixgbevf_ipsec_find_empty_idx()
159 			if (!ipsec->tx_tbl[i].used)  in ixgbevf_ipsec_find_empty_idx()
169  * @ipsec: pointer to IPsec struct
178 struct xfrm_state *ixgbevf_ipsec_find_rx_state(struct ixgbevf_ipsec *ipsec,  in ixgbevf_ipsec_find_rx_state()  argument
186 	hash_for_each_possible_rcu(ipsec->rx_sa_list, rsa, hlist,  in ixgbevf_ipsec_find_rx_state()
220 		netdev_err(dev, "Unsupported IPsec algorithm\n");  in ixgbevf_ipsec_parse_proto_keys()
225 		netdev_err(dev, "IPsec offload requires %d bit authentication\n",  in ixgbevf_ipsec_parse_proto_keys()
235 		netdev_err(dev, "Unsupported IPsec algorithm - please use %s\n",  in ixgbevf_ipsec_parse_proto_keys()
249 		netdev_err(dev, "IPsec hw offload only supports keys up to 128 bits with a 32 bit salt\n");  in ixgbevf_ipsec_parse_proto_keys()
265 	struct ixgbevf_ipsec *ipsec = adapter->ipsec;  in ixgbevf_ipsec_add_sa()  local
270 		netdev_err(dev, "Unsupported protocol 0x%04x for IPsec offload\n",  in ixgbevf_ipsec_add_sa()
284 		ret = ixgbevf_ipsec_find_empty_idx(ipsec, true);  in ixgbevf_ipsec_add_sa()
325 		memcpy(&ipsec->rx_tbl[sa_idx], &rsa, sizeof(rsa));  in ixgbevf_ipsec_add_sa()
329 		ipsec->num_rx_sa++;  in ixgbevf_ipsec_add_sa()
332 		hash_add_rcu(ipsec->rx_sa_list, &ipsec->rx_tbl[sa_idx].hlist,  in ixgbevf_ipsec_add_sa()
338 		ret = ixgbevf_ipsec_find_empty_idx(ipsec, false);  in ixgbevf_ipsec_add_sa()
365 		memcpy(&ipsec->tx_tbl[sa_idx], &tsa, sizeof(tsa));  in ixgbevf_ipsec_add_sa()
369 		ipsec->num_tx_sa++;  in ixgbevf_ipsec_add_sa()
383 	struct ixgbevf_ipsec *ipsec = adapter->ipsec;  in ixgbevf_ipsec_del_sa()  local
389 		if (!ipsec->rx_tbl[sa_idx].used) {  in ixgbevf_ipsec_del_sa()
395 		ixgbevf_ipsec_del_pf_sa(adapter, ipsec->rx_tbl[sa_idx].pfsa);  in ixgbevf_ipsec_del_sa()
396 		hash_del_rcu(&ipsec->rx_tbl[sa_idx].hlist);  in ixgbevf_ipsec_del_sa()
397 		memset(&ipsec->rx_tbl[sa_idx], 0, sizeof(struct rx_sa));  in ixgbevf_ipsec_del_sa()
398 		ipsec->num_rx_sa--;  in ixgbevf_ipsec_del_sa()
402 		if (!ipsec->tx_tbl[sa_idx].used) {  in ixgbevf_ipsec_del_sa()
408 		ixgbevf_ipsec_del_pf_sa(adapter, ipsec->tx_tbl[sa_idx].pfsa);  in ixgbevf_ipsec_del_sa()
409 		memset(&ipsec->tx_tbl[sa_idx], 0, sizeof(struct tx_sa));  in ixgbevf_ipsec_del_sa()
410 		ipsec->num_tx_sa--;  in ixgbevf_ipsec_del_sa()
441  * ixgbevf_ipsec_tx - setup Tx flags for IPsec offload
444  * @itd: ipsec Tx data for later use in building context descriptor
451 	struct ixgbevf_ipsec *ipsec = adapter->ipsec;  in ixgbevf_ipsec_tx()  local
478 	tsa = &ipsec->tx_tbl[sa_idx];  in ixgbevf_ipsec_tx()
530  * ixgbevf_ipsec_rx - decode IPsec bits from Rx descriptor
535  * Determine if there was an IPsec encapsulation noticed, and if so set up
546 	struct ixgbevf_ipsec *ipsec = adapter->ipsec;  in ixgbevf_ipsec_rx()  local
559 	 * hw won't recognize the IPsec packet and anyway the  in ixgbevf_ipsec_rx()
587 	xs = ixgbevf_ipsec_find_rx_state(ipsec, daddr, proto, spi, !!ip4);  in ixgbevf_ipsec_rx()
605  * ixgbevf_init_ipsec_offload - initialize registers for IPsec operation
610 	struct ixgbevf_ipsec *ipsec;  in ixgbevf_init_ipsec_offload()  local
620 	ipsec = kzalloc(sizeof(*ipsec), GFP_KERNEL);  in ixgbevf_init_ipsec_offload()
621 	if (!ipsec)  in ixgbevf_init_ipsec_offload()
623 	hash_init(ipsec->rx_sa_list);  in ixgbevf_init_ipsec_offload()
626 	ipsec->rx_tbl = kzalloc(size, GFP_KERNEL);  in ixgbevf_init_ipsec_offload()
627 	if (!ipsec->rx_tbl)  in ixgbevf_init_ipsec_offload()
631 	ipsec->tx_tbl = kzalloc(size, GFP_KERNEL);  in ixgbevf_init_ipsec_offload()
632 	if (!ipsec->tx_tbl)  in ixgbevf_init_ipsec_offload()
635 	ipsec->num_rx_sa = 0;  in ixgbevf_init_ipsec_offload()
636 	ipsec->num_tx_sa = 0;  in ixgbevf_init_ipsec_offload()
638 	adapter->ipsec = ipsec;  in ixgbevf_init_ipsec_offload()
652 	kfree(ipsec->rx_tbl);  in ixgbevf_init_ipsec_offload()
653 	kfree(ipsec->tx_tbl);  in ixgbevf_init_ipsec_offload()
654 	kfree(ipsec);  in ixgbevf_init_ipsec_offload()
660  * ixgbevf_stop_ipsec_offload - tear down the IPsec offload
665 	struct ixgbevf_ipsec *ipsec = adapter->ipsec;  in ixgbevf_stop_ipsec_offload()  local
667 	adapter->ipsec = NULL;  in ixgbevf_stop_ipsec_offload()
668 	if (ipsec) {  in ixgbevf_stop_ipsec_offload()
669 		kfree(ipsec->rx_tbl);  in ixgbevf_stop_ipsec_offload()
670 		kfree(ipsec->tx_tbl);  in ixgbevf_stop_ipsec_offload()
671 		kfree(ipsec);  in ixgbevf_stop_ipsec_offload()