---
name: "rte_security_pdcp_xform"
section: "3"
platform: "linux"
package: "dpdk-doc"
version: "24.11.4-0+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/rte_security_pdcp_xform"
---

# rte\_security\_pdcp\_xform(3)

## NAME

rte\_security\_pdcp\_xform

## SYNOPSIS

`#include <rte_security.h>`

### Data Fields

int8\_t **bearer**\
 uint8\_t **en\_ordering**\
 uint8\_t **remove\_duplicates**\
 enum **rte\_security\_pdcp\_domain** **domain**\
 enum **rte\_security\_pdcp\_direction** **pkt\_dir**\
 enum **rte\_security\_pdcp\_sn\_size** **sn\_size**\
 uint32\_t **hfn**\
 uint32\_t **hfn\_threshold**\
 uint8\_t **hfn\_ovrd**\
 uint8\_t **sdap\_enabled**\
 uint16\_t **reserved**\

## Detailed Description

PDCP security association configuration data.

This structure contains data required to create a PDCP security session.

Definition at line **536** of file **rte\_security.h**.

## Field Documentation

### int8\_t bearer

PDCP bearer ID

Definition at line **537** of file **rte\_security.h**.

### uint8\_t en\_ordering

Enable in order delivery, this field shall be set only if driver/HW is capable. See RTE\_SECURITY\_PDCP\_ORDERING\_CAP.

Definition at line **541** of file **rte\_security.h**.

### uint8\_t remove\_duplicates

Notify driver/HW to detect and remove duplicate packets. This field should be set only when driver/hw is capable. See RTE\_SECURITY\_PDCP\_DUP\_DETECT\_CAP.

Definition at line **546** of file **rte\_security.h**.

### enum rte\_security\_pdcp\_domain domain

PDCP mode of operation: Control or data

Definition at line **548** of file **rte\_security.h**.

### enum rte\_security\_pdcp\_direction pkt\_dir

PDCP Frame Direction 0:UL 1:DL

Definition at line **550** of file **rte\_security.h**.

### enum rte\_security\_pdcp\_sn\_size sn\_size

Sequence number size, 5/7/12/15/18

Definition at line **552** of file **rte\_security.h**.

### uint32\_t hfn

Starting Hyper Frame Number to be used together with the SN from the PDCP frames

Definition at line **556** of file **rte\_security.h**.

### uint32\_t hfn\_threshold

HFN Threshold for key renegotiation

Definition at line **558** of file **rte\_security.h**.

### uint8\_t hfn\_ovrd

HFN can be given as a per packet value also. As we do not have IV in case of PDCP, and HFN is used to generate IV. IV field can be used to get the per packet HFN while enq/deq. If hfn\_ovrd field is set, user is expected to set the per packet HFN in place of IV. PMDs will extract the HFN and perform operations accordingly.

Definition at line **567** of file **rte\_security.h**.

### uint8\_t sdap\_enabled

In case of 5G NR, a new protocol (SDAP) header may be set inside PDCP payload which should be authenticated but not encrypted. Hence, driver should be notified if SDAP is enabled or not, so that SDAP header is not encrypted.

Definition at line **573** of file **rte\_security.h**.

### uint16\_t reserved

Reserved for future

Definition at line **575** of file **rte\_security.h**.

## Author

Generated automatically by Doxygen for DPDK from the source code.