lkml.org 
[lkml]   [2018]   [Sep]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH net-next v3 02/17] zinc: introduce minimal cryptography library
    On Tue, Sep 11, 2018 at 12:08:56PM +0200, Ard Biesheuvel wrote:
    > > As Zinc is simply library code, its config options are un-menued, with
    > > the exception of CONFIG_ZINC_DEBUG, which enables various selftests and
    > > BUG_ONs.
    > >
    >
    > In spite of the wall of text, you fail to point out exactly why the
    > existing AEAD API in unsuitable, and why fixing it is not an option.
    >
    > As I pointed out in a previous version, I don't think we need a
    > separate crypto API/library in the kernel, and I don't think you have
    > convinced anyone else yet either.

    Um, then why do people keep sprinkling new crypto/hash code all around
    the kernel tree? It's because what we have as a crypto api is complex
    and is hard to use for many in-kernel users.

    Something like this new interface (zinc) is a much "saner" api for
    writing kernel code that has to interact with crypto/hash primitives.

    I see no reason why the existing crypto code can be redone to use the
    zinc crypto primitives over time, making there only be one main location
    for the crypto algorithms. But to do it the other way around is pretty
    much impossible given the complexities in the existing api that has been
    created over time.

    Not to say that the existing api is not a viable one, but ugh, really?
    You have to admit it is a pain to try to use in any "normal" type of
    "here's a bytestream, go give me a hash" type of method, right?

    Also there is the added benefit that the crypto primitives here have
    been audited by a number of people (so Jason stated), and they are
    written in a way that the crypto community can more easily interact and
    contribute to. Which is _way_ better than what we have today.

    So this gets my "stamp of approval" for whatever it is worth :)

    thanks,

    greg k-h

    \
     
     \ /
      Last update: 2018-09-11 16:56    [W:4.196 / U:1.732 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site