Re: User Space API for CryptoAPI

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi.

On Tue, Mar 25, 2008 at 10:37:23AM -0700, Loc Ho (lho@xxxxxxxx) wrote:
> I want this user interface to be compatible with OpenSSL. Therefore, it
> musts have the sample API as OpenSSL. Internally, it would wrap around
> Linux CryptoAPI instead OCF-Linux. Each file descriptor would allow you
> to create any number of cloned fd to create transformation via I/O CTL
> call. Let me summary:
> 
> 1. One sharable fd to issue I/O ctrl
> 2. I/O ctrl to create transformation on cloned fd
> 3. I/O ctrl to encrypt/decript/hash (structure of parameter will
> determine type of operation)
> 4. I/O ctrl as below (taken from OCF-Linux):

Besides the fact, that it is completely non-understandible for me, idea
might look not that bad.

I believe you will create a tf object for each opened file descriptor
and then setup it via ioctls. Probably it is the easiest and simplest
solution, but there are lots of people who believe ioctls should not
exist and instead new system call has to be implemented... So, cook up
your code to be easily transferred from char device ioctl to syscall
interface.

-- 
	Evgeniy Polyakov
--
To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]

  Powered by Linux