Bug fixes, README update and version bump.

naghaabirami · bjayanax · Yogaraj-Alamenda · commit 910240d9c795 · 2025-03-28T15:41:37.000+05:30
- Version bump to 1.9.0 and README update
 - QAT2.0's icp_sal_userIsQatAvailable() API enabled to check
   QAT_HW device availability

Signed-off-by: Nagha Abirami &lt;naghax.abirami@intel.com&gt;
Co-authored-by: Jaya Naga Venkata Sudhakar &lt;bavirisettyx.jaya.naga.venkata.sudhakar@intel.com&gt;
diff --git a/configure.ac b/configure.ac
@@ -2,7 +2,7 @@
 # Process this file with autoconf to produce a configure script.
 
 AC_PREREQ([2.68])
-AC_INIT([qatengine], [1.8.1], [])
+AC_INIT([qatengine], [1.9.0], [])
 AC_CONFIG_SRCDIR([config.h.in])
 AC_CONFIG_HEADERS([config.h])
 AC_CONFIG_AUX_DIR([.])
@@ -447,7 +447,7 @@ fi
 AM_CONDITIONAL([QAT_HW], [test "x$cflags_qat_hw" != "x"])
 case "$host_os" in
 linux*)
-    AS_IF([test `lspci -vnd 8086: | grep -c 4940` != "0"], [AC_SUBST([enable_qat20_oot], ["-DQAT20_OOT"])])
+    AS_IF([test `lspci -vnd 8086: | grep -c -E '4940|4942|4944|4946'` != "0"], [AC_SUBST([enable_qat20_oot], ["-DQAT20_OOT"])])
 esac
 AM_CONDITIONAL([QAT_4XXX], [test "x$enable_qat20_oot" != "x"])
 
diff --git a/cryptography-primitives b/cryptography-primitives
@@ -1 +1 @@
-Subproject commit e3d4084720f6047b8338a0855e345aa5c3c3c8f2
+Subproject commit 5a77835c95768d1099c38568291e714c9d9f86ce
diff --git a/docs/bssl_support.md b/docs/bssl_support.md
@@ -14,7 +14,7 @@ This document details the capabilities, interfaces and limitations of the Boring
 ## Limitations
 Some limitations specific for the current BoringSSL\* Library:
 * NIST Binary Curves and NIST Koblitz Curves are not supported by BoringSSL\.
-* Supports QAT_HW and QAT_SW on Linux. QAT_SW and QAT_HW FreeBSD is not supported.
+* QAT_HW and QAT_SW Co-existence is not supported.
 * `RSA_padding_add_PKCS1_OAEP` function is exported by BoringSSL\* `libdecrepit.so`,
 so it needs to be linked in the BoringSSL\* Library. It may cause linking error while
 building with the system lack of that library.
diff --git a/docs/hardware_requirements.md b/docs/hardware_requirements.md
@@ -9,7 +9,7 @@ QAT_HW acceleration is supported on the platforms with the following QAT devices
 
 QAT_SW acceleration is supported in the platforms starting with [3rd Generation Intel&reg; Xeon&reg; Scalable Processors family][6] and later.
 
-[1]:https://www.intel.com/content/www/us/en/products/details/processors/xeon/scalable.html
+[1]:https://www.intel.com/content/www/us/en/products/details/processors/xeon.html
 [2]:https://www.intel.com/content/www/us/en/products/sku/125200/intel-quickassist-adapter-8970/downloads.html
 [3]:https://www.intel.com/content/www/us/en/products/sku/125199/intel-quickassist-adapter-8960/downloads.html
 [4]:https://www.intel.com/content/www/us/en/products/sku/80371/intel-communications-chipset-8950/specifications.html
diff --git a/docs/limitations.md b/docs/limitations.md
@@ -107,3 +107,5 @@
   behaviour is observed in OpenSSL_SW as well [OpenSSL#21833](https://github.com/openssl/openssl/issues/21833)
 * Performance scaling is not linear in QAT2.0 supported platforms for ECDSA and Chacha-Poly algorithms.
 * Performance drop observed with ECDSAP256 algorithm in the OpenSSL speed tests with FreeBSD 14 intree driver.
+* Performance drop observed in QAT Engine with [async-nginx](https://github.com/intel/asynch_mode_nginx/tree/master) on FreeBSD OS with asymmetric and symmetric ciphers.
+* BoringSSL on FreeBSD OS is validated functionally with limited performance validation on Nginx QUIC POC.
diff --git a/docs/software_requirements.md b/docs/software_requirements.md
@@ -11,18 +11,18 @@ This release was validated on the following versions and expected to work on all
 and also from the latest versions from the links below.
 
 ## QAT_HW Drivers:
-* [Intel® QuickAssist Technology Driver for Linux\* HW Version 2.0][4] - **QAT20.L.1.1.50-00003**
-* [Intel® QuickAssist Technology Driver for Linux\* HW Version 1.x][5] - **QAT.L.4.26.0-00008**
+* [Intel® QuickAssist Technology Driver for Linux\* HW Version 2.0][4] - **QAT20.L.1.2.30-00078**
+* [Intel® QuickAssist Technology Driver for Linux\* HW Version 1.x][5] - **QAT.L.4.27.0-00006**
 * Intel® QuickAssist Technology Driver for FreeBSD\* HW Version 1.x and 2.0 - **QAT.B.3.14.31-00003** (FreeBSD 13.2)
 * [Intel® QATlib for Linux with intree driver][7] - **QATlib 24.09.0** & **QATlib 24.02.0** (for Dockerfile only)
 * [Intel®  QATlib for FreeBSD with intree driver(FreeBSD 14)][8] - **FreeBSD QATlib 23.09.0** (FreeBSD 14)
 
 ## QAT_SW Libraries:
-* [Intel&reg; Crypto Multi-buffer library][2] - **IPP Crypto v1.0.0** & **IPP Crypto 2021.10** (for BoringSSL only)
+* [Intel&reg; Crypto Multi-buffer library][2] - **IPP Crypto v1.1.0** & **IPP Crypto 2021.10** (for BoringSSL only)
 * [Intel&reg; Multi-Buffer crypto for IPsec Library release version][3] **v2.0**
 
 ## Crypto Libraries:
-* [OpenSSL\*][9] 3.0.15 & 3.2.3
+* [OpenSSL\*][9] 3.0.16, 3.2.4, 3.3.3 & 3.4.1
 * BoringSSL\* commit - [23ed9d3][10]
 * [Tongsuo][11] - 8.4.0 (BabaSSL)
 
diff --git a/driver_install.sh b/driver_install.sh
@@ -2,15 +2,15 @@
 
 #QAT_HW OOT driver Location
 QAT17_DRIVER=https://downloadmirror.intel.com/838409/QAT.L.4.27.0-00006.tar.gz
-QAT20_DRIVER=https://downloadmirror.intel.com/822703/QAT20.L.1.1.50-00003.tar.gz
+QAT20_DRIVER=https://downloadmirror.intel.com/843052/QAT20.L.1.2.30-00078.tar.gz
 
 #Supported Devices
 numC62xDevice=`lspci -vnd 8086: | grep -c "37c8\|37c9"`
 numDh895xDevice=`lspci -vnd 8086: | grep -c "0435\|0443"`
 numC3xxxDevice=`lspci -vnd 8086: | grep -c "19e2\|19e3"`
 num200xxDevice=`lspci -vnd 8086: | grep -c "18ee\|18ef"`
 numC4xxxDevice=`lspci -vnd 8086: | grep -c "18a0\|18a1"`
-num4xxxDevice=`lspci -vnd 8086: | grep -c "4940"`
+num4xxxDevice=`lspci -vnd 8086: | grep -c "4940\|4942"`
 
 QAT_ENGINE_ROOT=$PWD
 
diff --git a/e_qat.c b/e_qat.c
@@ -169,13 +169,13 @@ int qat_fips_kat_test;
 const char *engine_qat_id = STR(QAT_ENGINE_ID);
 #if defined(QAT_HW) && defined(QAT_SW)
 const char *engine_qat_name =
-    "Reference implementation of QAT crypto engine(qat_hw & qat_sw) v1.8.1";
+    "Reference implementation of QAT crypto engine(qat_hw & qat_sw) v1.9.0";
 #elif QAT_HW
 const char *engine_qat_name =
-    "Reference implementation of QAT crypto engine(qat_hw) v1.8.1";
+    "Reference implementation of QAT crypto engine(qat_hw) v1.9.0";
 #else
 const char *engine_qat_name =
-    "Reference implementation of QAT crypto engine(qat_sw) v1.8.1";
+    "Reference implementation of QAT crypto engine(qat_sw) v1.9.0";
 #endif
 unsigned int engine_inited = 0;
 int fallback_to_openssl = 0;
@@ -1117,7 +1117,7 @@ int bind_qat(ENGINE *e, const char *id)
    int ret = 0;
 #ifdef QAT_HW
     char *config_section = NULL;
-# if !defined(QAT_HW_INTREE) && (defined(QAT20_OOT) || defined(__FreeBSD__))
+#ifdef ENABLE_QAT_HW_KPT
     Cpa32U dev_count = 0;
 # endif
 #endif
@@ -1132,7 +1132,7 @@ int bind_qat(ENGINE *e, const char *id)
 
     /* For QAT_HW, Check if the QAT_HW device is available */
 #ifdef QAT_HW
-# if !defined(QAT_HW_INTREE) && (defined(QAT20_OOT) || defined(__FreeBSD__))
+# ifdef ENABLE_QAT_HW_KPT
     if (icp_adf_get_numDevices(&dev_count) == CPA_STATUS_SUCCESS) {
         if (dev_count > 0) {
             qat_hw_offload = 1;
@@ -1144,7 +1144,7 @@ int bind_qat(ENGINE *e, const char *id)
         qat_hw_offload = 1;
         DEBUG("QAT HW device available\n");
     }
-#endif
+# endif
     if (!qat_hw_offload) {
 # ifndef QAT_SW
 #  ifdef QAT_BORINGSSL
diff --git a/openssl b/openssl
@@ -1 +1 @@
-Subproject commit c523121f902fde2929909dc7f76b13ceb4961efe
+Subproject commit fa1e5dfb142bb1c26c3c38a10aafa7a095df52e5
diff --git a/qat_provider.h b/qat_provider.h
@@ -51,8 +51,8 @@
 # include <openssl/bio.h>
 # include <openssl/core_dispatch.h>
 
-# define QAT_PROVIDER_VERSION_STR "v1.8.1"
-# define QAT_PROVIDER_FULL_VERSION_STR "QAT Provider v1.8.1"
+# define QAT_PROVIDER_VERSION_STR "v1.9.0"
+# define QAT_PROVIDER_FULL_VERSION_STR "QAT Provider v1.9.0"
 
 # if defined(QAT_HW) && defined(QAT_SW)
 #  define QAT_PROVIDER_NAME_STR "QAT Provider for QAT_HW and QAT_SW"
diff --git a/qatengine-oot.spec b/qatengine-oot.spec
@@ -12,27 +12,27 @@
 %global fullversion  %{major}.%{minor}.%{rev}
 
 %global ippcp_major        12
-%global ippcp_minor        0
+%global ippcp_minor        1
 %global ippcp              cryptography-primitives
-%global ippcpver           1.0.0
+%global ippcpver           1.1.0
 %global ippcpfull          %{ippcp}-%{ippcpver}
 %global ippcpfullversion   %{ippcp_major}.%{ippcp_minor}
 
-%global openssl            openssl-3.0.15
-%global qatdriver          QAT20.L.1.1.50-00003
+%global openssl            openssl-3.0.16
+%global qatdriver          QAT20.L.1.2.30-00078
 
 %global openssl_source     %{_builddir}/%{openssl}
 %global openssl_install    %{buildroot}/%{_prefix}/local/ssl
 
 Name:       QAT_Engine
-Version:    1.8.0
+Version:    1.9.0
 Release:    1%{?dist}
 Summary:    Intel QuickAssist Technology(QAT) OpenSSL Engine
 License:    BSD-3-Clause AND OpenSSL
 
 Source0:    https://github.com/intel/QAT_Engine/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source1:    https://github.com/openssl/openssl/releases/download/%{openssl}/%{openssl}.tar.gz#/%{openssl}.tar.gz
-Source2:    https://downloadmirror.intel.com/822703/%{qatdriver}.tar.gz#/%{qatdriver}.tar.gz
+Source2:    https://downloadmirror.intel.com/843052/%{qatdriver}.tar.gz#/%{qatdriver}.tar.gz
 %if !0%{?suse_version}
 Source3:    https://github.com/intel/ipp-crypto/archive/refs/tags/v%{ippcpver}.tar.gz#/%{ippcp}-%{ippcpver}.tar.gz
 Source4:    https://github.com/intel/intel-ipsec-mb/archive/refs/tags/v%{ipsecver}.tar.gz#/%{ipsecfull}.tar.gz
@@ -121,7 +121,7 @@ autoreconf -ivf
 
 %if !0%{?suse_version}
 # Enable QAT_HW & QAT_SW Co-existence acceleration
-./configure --with-openssl_install_dir=%{openssl_install} --with-qat_hw_dir=%{_builddir}/%{qatdriver} --enable-qat_sw
+./configure --with-openssl_install_dir=%{openssl_install} --with-qat_hw_dir=%{_builddir}/%{qatdriver} --enable-qat_sw --with-qat_sw_crypto_mb_install_dir=%{buildroot}/%{_prefix}/local --with-qat_sw_ipsec_mb_install_dir=%{buildroot}/%{_prefix}
 %else
 # Enable QAT_HW acceleration for SUSE
 ./configure --with-openssl_install_dir=%{openssl_install} --with-qat_hw_dir=%{_builddir}/%{qatdriver}
diff --git a/qatengine.spec b/qatengine.spec
@@ -13,7 +13,7 @@
 %endif
 
 Name:           qatengine
-Version:        1.8.1
+Version:        1.9.0
 Release:        1%{?dist}
 Summary:        Intel QuickAssist Technology (QAT) OpenSSL Engine
 
@@ -79,6 +79,9 @@ openssl engine -v %{name}
 %endif
 
 %changelog
+* Mon Mar 10 2025 Nagha Abirami <naghax.abirami@intel.com> - 1.9.0-1
+- Update to qatengine v1.9.0
+
 * Thu Jan 23 2025 Yogaraj Alamenda <yogaraj.alamenda@intel.com> - 1.8.1-1
 - Update to qatengine v1.8.1
 - Update e_qat_err files license info
