Re: [EXT] Re: [RFC PATCH HBK: 2/8] hw-bound-key: flag-is_hbk added to the tfm
flat view
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2022-09-13 10:29:39
Also in:
keyrings, linux-crypto, linux-integrity, lkml
On Tue, Sep 13, 2022 at 10:01:13AM +0000, Varun Sethi wrote:
[Varun] The proposed patchset makes things more scalable. With the hardware backed key flag, there's no need for the security co-processor driver to register separate set of algorithms. This makes things simpler and more scalable for the consumers (OpenSSL, AF_ALG, KTLS etc), as they can continue to use standard set of algorithms and leave the key specific complexity to the driver.
Users already need to specify which driver they are going to use in order to actually access the hardware keys instead of getting a software implementation of the same algorithm. So I don't see what extra burdens are placed on them by the current regime. Cheers, -- Email: Herbert Xu [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt