Re: communicating from the user space

Hi Nikos,

Please can you let me know my understanding regarding openssl and
crypto are correct?
I have mentioned my understanding in my earlier posts,but let me
mention it here again.

I want to interact with Crypto Hardware from user space using openssl
like libraries based applications through cryptodev-linux interface.

it looks like openssl comes with cryptodev-linux support(through
eng_cryptodev.c) .
When I downloaded openssl,eng_cryptodev.c file is available by default.

below link refers about eng_cryptodev.c for openssl support :

http://repo.or.cz/w/cryptodev-linux.git/commitdiff/56cc4e3b8b761cb34f928f4eee59755d1f0afc53

Note:looks like there are some additional changes done on
eng_cryptodev.c file available in updated openssl source code.

There seems to be some changes/patches  also available recently for
cryptodev-linux,below contains reference information.

http://rt.openssl.org/Ticket/Display.html?id=2770&user=guest&pass=guest


Please let me know if my understanding is incorrect .

one more thing while compiling openssl with above mentioned changes I
faced compilation issues in linux ,Please can you also let me know
whether there are per-requisites like any dependent libraries or
installing cryptodev-linux on host/target machine before compiling
openssl etc?

BR,
Srisowj


On Mon, Feb 23, 2015 at 2:56 AM, Nikos Mavrogiannopoulos
[off-list ref] wrote:

On Sun, 2015-02-22 at 16:04 +0100, Stephan Mueller wrote:

quoted

Am Sonntag, 22. Februar 2015, 18:32:34 schrieb sri sowj:

Hi sri,

quoted

Hi Stephen,

It was a great information with respective PF_ALG , I have explored a
bit on openssl and algorithms prospect , Please let me know if
anything to add to it.

openssl crypto engine:

below are the steps to enable openssl to communicate using pf/af_alg.

#1:git clone http://src.carnivore.it/users/common/af_alg/

Yes, that is it. But it is not fully efficient as it does not use vmsplice
where appropriate. So, libkcapi should be faster in several use cases.

When would vmsplice be appropriate? As far as I understand vmsplice adds
a cost on operations for small data, which is the majority of use cases
in crypto. In the measurements I did for cryptodev-linux [0] vmsplice
did improve performance only for more than 64k packets which is never
the case with real world crypto (TLS has a maximum of 14k for example).

regards,
Nikos

[0]. http://cryptodev-linux.org/comparison.html


--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html