tech-crypto archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Adding opencrypto, crypto acceelerator to GENERIC kernels?




On Nov 18, 2003, at 8:29 PM, Bill Sommerfeld wrote:

i'll admit to a certain lack of familiarity with the /dev/crypto
interface, but doing software crypto in the kernel on behalf of
userspace makes absolutely no sense unless you're implementing
indirect keying with a trusted in-kernel keystore not accessible to
userland...

And a knob doesn't make sense for that because userland wouldn't have
access to the keys in the first place in that case..

In general, I agree. I would rather we not support it at all, but I can see how it could be useful for debugging/trouble-shooting.

        -- Jason R. Thorpe <thorpej%wasabisystems.com@localhost>




Home | Main Index | Thread Index | Old Index