On Wed, Apr 22, 2015 at 11:20 AM, Stefan Hajnoczi <stefanha@xxxxxxxxx> wrote: > On Tue, Apr 21, 2015 at 04:07:56PM +0200, Paolo Bonzini wrote: >> On 21/04/2015 16:07, Catalin Vasile wrote: >> > I don't get the part with getting cryptodev upstream. >> > I don't know what getting cryptodev upstream actually implies. >> > From what I know cryptodev is done (is a functional project) that was >> > rejected in the Linux Kernel >> > and there isn't actually way to get it upstream. >> >> Yes, I agree. > > The limitations of AF_ALG need to addressed somehow, so what is the next > step? > > Stefan If we want a mainstream userspace backend that could interact with a lot of crypto engines, we could use OpenSSL (it can actually use cryptodev and AF_ALG as engines). For now, until mid June (my diploma project presentation) I still want to use vhost as a backend for the sole purpose of having a finished backend which now I have a good grasp upon. If the finished work would be good enough work to be merged upstream will be talked later. As a GSoC project, OpenSSL as a backend would continue the virtio-crypto development, as it's not uncommon to have multiple types of backends. The current work on virtio-crypto qemu and guest module is pretty backend agnostic, and could allow future development(use of other backends and other features). -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
