]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
xfrm: Skip redundant replay recheck for the hardware offload path
authorJianbo Liu <jianbol@nvidia.com>
Tue, 21 Oct 2025 01:35:43 +0000 (04:35 +0300)
committerSteffen Klassert <steffen.klassert@secunet.com>
Mon, 27 Oct 2025 09:35:51 +0000 (10:35 +0100)
commitb427c0c3bc40cca268a5d54a1cdf6166cb1360e2
tree60a0a7d43dfe1774f13d2ddb8642b4d4c8eabc3d
parent10a11861943902fda74f37f456b45183b2bca270
xfrm: Skip redundant replay recheck for the hardware offload path

The xfrm_replay_recheck() function was introduced to handle the issues
arising from asynchronous crypto algorithms.

The crypto offload path is now effectively synchronous, as it holds
the state lock throughout its operation. This eliminates the race
condition, making the recheck an unnecessary overhead. This patch
improves performance by skipping the redundant call when
crypto_done is true.

Additionally, the sequence number assignment is moved to an earlier
point in the function. This improves performance by reducing lock
contention and places the logic at a more appropriate point, as the
full sequence number (including the higher-order bits) can be
determined as soon as the packet is received.

Signed-off-by: Jianbo Liu <jianbol@nvidia.com>
Reviewed-by: Cosmin Ratiu <cratiu@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_input.c