From e9c0f4d15df6dce7906ef13a82256525a5a6266f Mon Sep 17 00:00:00 2001
From: Thore Sommer <thore.sommer@tum.de>
Date: Fri, 24 Oct 2025 10:47:28 +0200
Subject: [PATCH 1/2] intel-ipsec-mb: add package for 2.0.1

---
 pkgs/by-name/in/intel-ipsec-mb/package.nix | 41 ++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 pkgs/by-name/in/intel-ipsec-mb/package.nix

diff --git a/pkgs/by-name/in/intel-ipsec-mb/package.nix b/pkgs/by-name/in/intel-ipsec-mb/package.nix
new file mode 100644
index 000000000000..b7a503daca89
--- /dev/null
+++ b/pkgs/by-name/in/intel-ipsec-mb/package.nix
@@ -0,0 +1,41 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  nasm,
+}:
+
+stdenv.mkDerivation rec {
+  pname = "intel-ipsec-mb";
+  version = "2.0.1";
+
+  src = fetchFromGitHub {
+    owner = "intel";
+    repo = "intel-ipsec-mb";
+    rev = "v${version}";
+    hash = "sha256-k/NoPMKbiWZ25tdomsPpv2gfhQuBHxzX6KRT1UY88Ko=";
+  };
+
+  sourceRoot = "source/lib";
+
+  nativeBuildInputs = [ nasm ];
+
+  makeFlags = [
+    "PREFIX=$(out)"
+    "NOLDCONFIG=y"
+  ];
+
+  meta = with lib; {
+    description = "Intel Multi-Buffer Crypto for IPsec Library";
+    longDescription = ''
+      Intel Multi-Buffer Crypto for IPsec Library provides software crypto
+      acceleration primarily targeting packet processing applications.
+      It supports a variety of use cases including IPsec, TLS, wireless (RAN), cable,
+      and MPEG DRM.
+    '';
+    homepage = "https://github.com/intel/intel-ipsec-mb";
+    license = licenses.bsd3;
+    platforms = [ "x86_64-linux" ];
+    maintainers = [ ];
+  };
+}

From 4fd550b3eabd0fce718dc90e2d9a526662df762b Mon Sep 17 00:00:00 2001
From: Thore Sommer <thore.sommer@tum.de>
Date: Fri, 24 Oct 2025 10:47:55 +0200
Subject: [PATCH 2/2] dpdk: add intel-ipsec-mb as dependency

intel-ipsec-mb for some of the cryptodev features
---
 pkgs/by-name/dp/dpdk/package.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/by-name/dp/dpdk/package.nix b/pkgs/by-name/dp/dpdk/package.nix
index 502a87814de9..74c2b4a34cd1 100644
--- a/pkgs/by-name/dp/dpdk/package.nix
+++ b/pkgs/by-name/dp/dpdk/package.nix
@@ -11,6 +11,7 @@
   libbpf,
   zlib,
   elfutils,
+  intel-ipsec-mb,
   jansson,
   openssl,
   libpcap,
@@ -54,6 +55,7 @@ stdenv.mkDerivation rec {
     jansson
     libbpf
     elfutils
+    intel-ipsec-mb
     libpcap
     numactl
     openssl.dev