Re: [PATCH v2 0/5] crypto: add algif_akcipher user space API
From: Stephan Mueller <hidden>
Date: 2015-10-27 23:48:02
Also in:
linux-api, lkml
Am Mittwoch, 28. Oktober 2015, 08:43:16 schrieb David Woodhouse: Hi David,
quoted
Albeit that all sounds like the crown jewel, how do you propose that shall happen? Assume that you have a web server that has a pub and priv key in its current configuration -- I guess that is the vast majority of configs. Can you please elaborate how the process for such a web server shall really work?1. Create a kernel-side key. 2. Use it. That may require adding an API similar to the one you're proposing, but working with kernel keys instead of directly with akcipher. Or perhaps the key subsystem can already offer what you need in userspace. David?
Ohh, I see. So, you are saying that there should not be a setpub/privkey for the akcipher AF_ALG interface?! If somebody wants to use akcipher, he shall set the key via the keyring and akcipher shall obtain it from the keyring? However, for the actual data shoveling, AF_ALG should still be used? -- Ciao Stephan