Update version and README for v0.6.16.

Signed-off-by: Yogaraj Alamenda <[email protected]>
intel · Oct 10, 2022 · 1c95fd7 · 1c95fd7
1 parent cab65f3
commit 1c95fd7
Show file tree

Hide file tree

Showing 8 changed files with 30 additions and 16 deletions.
diff --git a/configure.ac b/configure.ac
@@ -2,7 +2,7 @@
 # Process this file with autoconf to produce a configure script.
 
 AC_PREREQ([2.68])
-AC_INIT([qatengine], [0.6.15], [])
+AC_INIT([qatengine], [0.6.16], [])
 AC_CONFIG_SRCDIR([config.h.in])
 AC_CONFIG_HEADERS([config.h])
 AC_CONFIG_AUX_DIR([.])

diff --git a/docs/additional_information.md b/docs/additional_information.md
@@ -11,12 +11,12 @@ repository:
 * [Intel&reg; QuickAssist Technology (QAT) Async Mode NGINX\*][4]
 
 Additional Information and experimental code on integrating the Intel&reg QAT BoringSSL\*
-Library with NGINX\* for QUIC support can be found at the following location in [01.org][1]
+Library with NGINX\* for QUIC support can be found [here][1]
 
 * [Experimental QUIC support for NGINX][5]
 
-[1]:https://01.org/intel-quickassist-technology
-[2]:https://01.org/sites/default/files/downloads/intelr-quickassist-technology/337003-001-intelquickassisttechnologyandopenssl-110.pdf
+[1]:https://developer.intel.com/quickassist
+[2]:https://www.intel.com/content/www/us/en/content-details/709581/intel-quickassist-technology-and-openssl-1-1-0-performance.html
 [3]:https://www.intel.com/content/www/us/en/developer/articles/guide/building-software-acceleration-features-in-the-intel-qat-engine-for-openssl.html
 [4]:https://github.com/intel/asynch_mode_nginx
 [5]:https://cdrdv2.intel.com/v1/dl/getContent/737522
diff --git a/docs/limitations.md b/docs/limitations.md
@@ -29,9 +29,11 @@
   in the Haproxy application. This issue is not observed when using RSA ciphers
   or in multi-process mode.
 * There is an issue in sshd daemon application when using the QAT for default openssl.
-  sshd looks to be closing the file descriptors associated with QAT engine and driver
-  after initialising openssl. Work around in sshd which comments out the closefrom()
-  calls is needed to unblock the issue.
+  sshd looks to be closing the file descriptors associated with QAT engine and driver after
+  initialising openssl. Similar issue was present which prevents the ability to ssh out of
+  the system using the QAT engine in versions of the ssh application before OpenSSH 8.7.
+  The issue has been fixed with this commit [c9f7bba][1] . This update can be applied to
+  sshd to work-around the issue.
 * SM2 ECDH and ECDSA application testing is done using BabaSSL only since OpenSSL
   doesn't support SMx cipher suites.
 * SM3 is disabled by default due to performance drop observed in mulithread scenario
@@ -50,3 +52,9 @@
 * Known issue with OpenSSL 3.0 s_server using qatengine with cipher "DHE-RSA-CHACHA20-POLY1305" which
   works fine with Nginx. The issue is due to failure at EVP_PKEY_copy_parameter() in OpenSSL which is
   yet to be root caused.
+* From version 4.19 of Intel&reg; QAT driver for Linux, legacy or insecure algorithms such as DES,
+  3DES, MD5, SHA1, RC4 are disabled by default so there will be failures observed in the relevant
+  ciphers. Driver needs to be built with flag "--enable-legacy-algorithms" to enable those algorithms
+  support.
+
+[1]:https://github.com/openssh/openssh-portable/commit/c9f7bba2e6f70b7ac1f5ea190d890cb5162ce127
diff --git a/docs/software_requirements.md b/docs/software_requirements.md
@@ -7,7 +7,7 @@ Technology Driver for Linux or Intel&reg;  QuickAssist Technology
 Driver for FreeBSD. This release was validated on the following:
 
 * Operating system: CentOS* 8.4, Ubuntu\* 20.04.2 LTS & FreeBSD\* 12.3
-* Intel&reg; Communications Chipset C62X Series Software for Linux\*, version **4.18**
+* Intel&reg; Communications Chipset C62X Series Software for Linux\*, version **4.19**
 * Intel&reg; Communications Chipset C62X Series Software for FreeBSD\*, version **3.12**
 * OpenSSL\* 1.1.1q & 3.0.5
 * BoringSSL\* commit - [15596efa5f][1]
@@ -29,7 +29,7 @@ This release was validated on the following:
 
 * Operating system: Ubuntu\* 20.04.2 LTS
 * Intel&reg; Crypto Multi-buffer library from the [ipp-crypto][2] release
-  version **IPP Crypto 2021.5**
+  version **IPP Crypto 2021.6**
 * Intel&reg; Multi-Buffer crypto for IPsec Library release version **v1.2**
 * OpenSSL\* 1.1.1q & 3.0.5
 * BoringSSL\* commit - [15596efa5f][1]

diff --git a/e_qat.c b/e_qat.c
@@ -148,13 +148,13 @@
 const char *engine_qat_id = STR(QAT_ENGINE_ID);
 #if defined(QAT_HW) && defined(QAT_SW)
 const char *engine_qat_name =
-    "Reference implementation of QAT crypto engine(qat_hw & qat_sw) v0.6.15";
+    "Reference implementation of QAT crypto engine(qat_hw & qat_sw) v0.6.16";
 #elif QAT_HW
 const char *engine_qat_name =
-    "Reference implementation of QAT crypto engine(qat_hw) v0.6.15";
+    "Reference implementation of QAT crypto engine(qat_hw) v0.6.16";
 #else
 const char *engine_qat_name =
-    "Reference implementation of QAT crypto engine(qat_sw) v0.6.15";
+    "Reference implementation of QAT crypto engine(qat_sw) v0.6.16";
 #endif
 unsigned int engine_inited = 0;
 

diff --git a/qat_provider.h b/qat_provider.h
@@ -51,8 +51,8 @@
 # include <openssl/bio.h>
 # include <openssl/core_dispatch.h>
 
-# define QAT_PROVIDER_VERSION_STR "v0.6.15"
-# define QAT_PROVIDER_FULL_VERSION_STR "QAT Provider v0.6.15"
+# define QAT_PROVIDER_VERSION_STR "v0.6.16"
+# define QAT_PROVIDER_FULL_VERSION_STR "QAT Provider v0.6.16"
 
 # if defined(QAT_HW) && defined(QAT_SW)
 #  define QAT_PROVIDER_NAME_STR "QAT Provider for QAT_HW and QAT_SW"

diff --git a/qatengine-sw.spec b/qatengine-sw.spec
@@ -4,7 +4,7 @@
 %global enginesdir %(pkg-config --variable=enginesdir libcrypto)
 
 Name:           qatengine-sw
-Version:        0.6.15
+Version:        0.6.16
 Release:        1%{?dist}
 Summary:        Intel QuickAssist Technology (QAT) OpenSSL Engine
 # Most of the source code is BSD, with the following exceptions:
@@ -49,6 +49,9 @@ autoreconf -ivf
 %exclude %{enginesdir}/qatengine.la
 
 %changelog
+* Mon Oct 03 2022 Yogaraj Alamenda <[email protected]> - 0.6.16-1
+- Update to qatengine v0.6.16
+
 * Wed Aug 24 2022 Yogaraj Alamenda <[email protected]> - 0.6.15-1
 - Update to qatengine v0.6.15
 

diff --git a/qatengine.spec b/qatengine.spec
@@ -4,7 +4,7 @@
 %global enginesdir %(pkg-config --variable=enginesdir libcrypto)
 
 Name:           qatengine
-Version:        0.6.15
+Version:        0.6.16
 Release:        1%{?dist}
 Summary:        Intel QuickAssist Technology (QAT) OpenSSL Engine
 # Most of the source code is BSD, with the following exceptions:
@@ -46,6 +46,9 @@ autoreconf -ivf
 %exclude %{enginesdir}/qatengine.la
 
 %changelog
+* Mon Oct 03 2022 Yogaraj Alamenda <[email protected]> - 0.6.16-1
+- Update to qatengine v0.6.16
+
 * Wed Aug 24 2022 Yogaraj Alamenda <[email protected]> - 0.6.15-1
 - Update to qatengine v0.6.15