Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH RFC v2 1/2] crypto: add PKE API | Date | Mon, 11 May 2015 14:45:27 +0100 |
| |
Herbert Xu <herbert@gondor.apana.org.au> wrote:
> > + * @capabilities: > > + * Specifies what operations are provided by the algorithm > > + * implementation. > > Don't do this. It's a nightmare for the user to have to deal with > multiple implementations with differing capabilities. > > Make the implementor provide backups/fallbacks.
What if the fallback doesn't exist? For instance, a H/W contained key is specifically limited to, say, just sign/verify and the not permitted to be used for encrypt/decrypt. How do you provide a fallback given you can't get at the key?
David
| |