[lkml]   [2010]   [Aug]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 00/19] RFC, v2: "New" /dev/crypto user-space interface
    On Fri, Aug 20, 2010 at 10:45:43AM +0200, Miloslav Trmač wrote:
    > Hello, following is a patchset providing an user-space interface to
    > the kernel crypto API. It is based on the older, BSD-compatible,
    > implementation, but the user-space interface is different.

    What's the goal of exporting the kernel crypto routines to userspace,
    as opposed to just simply doing the crypto in userspace? Is it to
    access hardware crypto accelerators? (1) I wasn't aware the kernel
    crypto routines actually used crypto accelerators, and (2) more often
    than not, by the time you take into account the time to move the
    crypto context as well as the data into kernel space and back out, and
    after you take into account price/performance, most hardware crypto
    accellerators have marginal performance benefits; in fact, more often
    than not, it's a lose.

    If the goal is access to hardware-escrowed keys, don't we have the TPM
    interface for that already?

    So I'm bit at a list what's the whole point of this patch series.
    Could you explain that in the documentation, please? Especially for
    crypto, explaining when something should be used, what the threat
    model is, etc., is often very important.

    Thanks, regards,

    - Ted

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2010-08-20 16:17    [W:0.021 / U:17.236 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site