sec_error on dpdk-l2fwd-crypto on custom board built on LS1046A

[Ghouse]

Hi All,

we are using a custom board based on LS1046A, we are running the dpdk-l2fwd-crypto using 2 boards connected back to back.

When we are running the application iam getting SEC return err:0x2000171aPMD: SEC return err:0x2000171aPMD:  and the application is stopping after some time (attached is the complete boot log and the error after running application)

Iam using the following command to run the binary

sudo ./dpdk-l2fwd-crypto -c 0x6 -n 1 -- -p 0x3 -q 1 -T 10 --cdev_type HW --chain AEAD --aead_algo aes-gcm --aead_key E4:11:C1:F8:23:40:7D:5F:28:1D:A2:4E:E0:38:42:E7 --aead_iv EE:ED:E3:8A:35:63:1D:B1:A1:DD:3A:93 --sessionless --no-mac-updating

However when i use the openssl then there is no problem and the application is working perfectly using below commands.

./dpdk-l2fwd-crypto --vdev "crypto_openssl0" --vdev "crypto_openssl1" -c 0x6 -n 1 -- -p 0x3 -q 1 -T 10 --cdev_type SW CIPHER_ONLY --cipher_algo aes-cbc --cipher_key 01:02:03:04:05:06:07:08:09:0a:0b:0c:0d:0e:0f:10 --cipher_iv 4F:7F:9D:F5:43:5E:34:5A:21:D7:48:11:21:C9:9D:A9 --cryptodev_mask 0x30 --sessionless --no-mac-updating.

Please let me know what can be done to resolve this error.

Thank u.

[Ghouse]

Hi All,

Please provide your help/support on above subject.

Thank u.

[yipingwang]

I checked your console log, you enabled optee in your system.

1730000.jr is reserved for op-tee when op-tee is enabled, 1730000.jr can't be used for normal world. So the error message "caam_jr 1730000.jr: failed to flush job ring 2" is reported when linux bootup.

Please disable optee, then use dpdk-l2fwd-crypt.

Or disable CFG_NXP_CAAM in OP-TEE configuration. In this configuration, all crypto operations in op-tee will be done in Software.

[Ghouse]

hi @yipingwang,

thank u for the reply,

please note that i want to use the Sec Hardware for all crypto operations, hence i have enabled it.

if i disable it, then Sec Hardware will still be used for crypto operations?

Please provide your support.

Thank u.

[hemantagrawal]

Sessionless crypto processing is not support on dpaa_sec driver in DPDK

Try using ipsec_secgw for back to back test
Check LDUK or LSDK user Guide DPDK section for ipsec-secgw application usages

9.2.4.3.7 dpdk-ipsec-secgw – IPSec gateway using SEC hardware