api: ipsec: add salt parameter

Added a parameter for passing salt/nonce for algorithms that
need it. Currently, only AES GCM needs it with 4 bytes of
salt. Later on, other cipher (or auth) algorithms may need
also salt/nonce data.

Signed-off-by: Petri Savolainen <petri.savolainen@linaro.org>
Reviewed-by: Dmitry Eremin-Solenikov <dmitry.ereminsolenikov@linaro.org>
Reviewed-by: Balasubramanian Manoharan <bala.manoharan@linaro.org>
Signed-off-by: Maxim Uvarov <maxim.uvarov@linaro.org>

1 files changed, 9 insertions, 0 deletions

diff --git a/include/odp/api/spec/ipsec.h b/include/odp/api/spec/ipsec.h
index 54491b123..7fa4e178d 100644
--- a/include/odp/api/spec/ipsec.h
+++ b/include/odp/api/spec/ipsec.h
@@ -384,6 +384,15 @@ typedef struct odp_ipsec_crypto_param_t {
 	/** Cipher key */
 	odp_crypto_key_t cipher_key;
 
+	/** Extra keying material for cipher key
+	 *
+	 *  Additional data used as salt or nonce if the algorithm requires it,
+	 *  other algorithms ignore this field. These algorithms require this
+	 *  field set:
+	 *  - AES_GCM: 4 bytes of salt
+	 **/
+	odp_crypto_key_t cipher_key_extra;
+
 	/** Authentication algorithm */
 	odp_auth_alg_t auth_alg;