On Thu, 5 Oct 2000, Sandy Harris wrote: > Will DNS security require similar things, or is all its key validation > done in user space? With the usual implementation approach, at least, DNSsec should be entirely user-space. > So what does it take to get a library into the kernel that does at least: >... > public key primitives (probably signature only) It is conceivable that one might want public-key encryption as well, and if RSA is being used, that's a trivial addition. Henry Spencer henry@xxxxxxxxxxxxx Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/