Jakub Kicinski
f05d26198c
psp: add stats from psp spec to driver facing api
...
Provide a driver api for reporting device statistics required by the
"Implementation Requirements" section of the PSP Architecture
Specification. Use a warning to ensure drivers report stats required
by the spec.
Signed-off-by: Daniel Zahka <daniel.zahka@gmail.com >
Link: https://patch.msgid.link/20251106002608.1578518-4-daniel.zahka@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org >
2025-11-07 18:53:57 -08:00
Jakub Kicinski
dae4a92399
psp: report basic stats from the core
...
Track and report stats common to all psp devices from the core. A
'stale-event' is when the core marks the rx state of an active
psp_assoc as incapable of authenticating psp encapsulated data.
Signed-off-by: Daniel Zahka <daniel.zahka@gmail.com >
Link: https://patch.msgid.link/20251106002608.1578518-2-daniel.zahka@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org >
2025-11-07 18:53:56 -08:00
Jakub Kicinski
6b46ca260e
net: psp: add socket security association code
...
Add the ability to install PSP Rx and Tx crypto keys on TCP
connections. Netlink ops are provided for both operations.
Rx side combines allocating a new Rx key and installing it
on the socket. Theoretically these are separate actions,
but in practice they will always be used one after the
other. We can add distinct "alloc" and "install" ops later.
Reviewed-by: Willem de Bruijn <willemb@google.com >
Signed-off-by: Jakub Kicinski <kuba@kernel.org >
Co-developed-by: Daniel Zahka <daniel.zahka@gmail.com >
Signed-off-by: Daniel Zahka <daniel.zahka@gmail.com >
Reviewed-by: Eric Dumazet <edumazet@google.com >
Link: https://patch.msgid.link/20250917000954.859376-9-daniel.zahka@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com >
2025-09-18 12:32:06 +02:00
Jakub Kicinski
117f02a49b
psp: add op for rotation of device key
...
Rotating the device key is a key part of the PSP protocol design.
Some external daemon needs to do it once a day, or so.
Add a netlink op to perform this operation.
Add a notification group for informing users that key has been
rotated and they should rekey (next rotation will cut them off).
Reviewed-by: Willem de Bruijn <willemb@google.com >
Signed-off-by: Jakub Kicinski <kuba@kernel.org >
Signed-off-by: Daniel Zahka <daniel.zahka@gmail.com >
Reviewed-by: Eric Dumazet <edumazet@google.com >
Link: https://patch.msgid.link/20250917000954.859376-6-daniel.zahka@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com >
2025-09-18 12:32:06 +02:00
Jakub Kicinski
00c94ca2b9
psp: base PSP device support
...
Add a netlink family for PSP and allow drivers to register support.
The "PSP device" is its own object. This allows us to perform more
flexible reference counting / lifetime control than if PSP information
was part of net_device. In the future we should also be able
to "delegate" PSP access to software devices, such as *vlan, veth
or netkit more easily.
Reviewed-by: Willem de Bruijn <willemb@google.com >
Signed-off-by: Jakub Kicinski <kuba@kernel.org >
Signed-off-by: Daniel Zahka <daniel.zahka@gmail.com >
Reviewed-by: Eric Dumazet <edumazet@google.com >
Link: https://patch.msgid.link/20250917000954.859376-3-daniel.zahka@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com >
2025-09-18 12:32:06 +02:00
