Doing step 3 using sw is probably faster than by hw (because it's short and avoid all the hw setup), so the suggested approach is probably faster than generic async hmac. On 4/13/2010 5:45 PM, Herbert Xu wrote: > On Tue, Apr 13, 2010 at 04:00:11PM +0300, Dmitry Kasatkin wrote: >> >> I would also: >> 1. calc hash(opad) using sw, export >> 2. hash(ipad ∥ message) using hw >> 3. then import and finup hash from step 1 with results of step 2 (using sw) > > Step 3 is the problem. If you perform step 3 in software then > there is no point in exporting a hmac(sha1) object. > > We should instead add ahash support to hmac and use that. > > Cheers, -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
