25 Nov
2015
25 Nov
'15
7:20 p.m.
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: 977e2cbc62d371fd5b243e0dddcd0364fba07842
https://github.com/fabbione/kronosnet/commit/977e2cbc62d371fd5b243e0dddcd03…
Author: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Date: 2015-11-25 (Wed, 25 Nov 2015)
Changed paths:
M libknet/crypto.c
M libknet/crypto.h
M libknet/handle.c
M libknet/internals.h
M libknet/nsscrypto.c
M libknet/nsscrypto.h
M libknet/threads_send_recv.c
Log Message:
-----------
[crypto] align crypto_authenticate_and_decrypt API to crypto_encrypt_and_sign
2 issues solved by this change:
1) API were different and crypto_authenticate_and_decrypt would trash the
incoming packet, that we might want to keep for later usage
(re-switch for example)
2) By using an extre pre-allocated buffer while decrypting incoming packets
we save a whole memcpy and that reduces latency on crypto communications:
pre-patch:
[root@kronosnet-node1-br0 ~]# ping 192.168.12.2 -f -c 1000 -s 65000
PING 192.168.12.2 (192.168.12.2) 65000(65028) bytes of data.
--- 192.168.12.2 ping statistics ---
1000 packets transmitted, 1000 received, 0% packet loss, time 5302ms
rtt min/avg/max/mdev = 5.102/5.283/22.679/0.947 ms, pipe 3, ipg/ewma 5.307/5.223 ms
post-patch:
[root@kronosnet-node1-br0 ~]# ping 192.168.12.2 -f -c 1000 -s 65000
PING 192.168.12.2 (192.168.12.2) 65000(65028) bytes of data.
--- 192.168.12.2 ping statistics ---
1000 packets transmitted, 1000 received, 0% packet loss, time 5196ms
rtt min/avg/max/mdev = 4.997/5.154/6.661/0.129 ms, ipg/ewma 5.201/5.173 ms
(using aes256 and sha1)
Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com>