On 17/08/11 14:38, Nikos Mavrogiannopoulos wrote: > On Mon, Aug 15, 2011 at 6:12 PM, Dmitry Kasatkin > <dmitry.kasatkin@xxxxxxxxx> wrote: >> On 11/08/11 20:20, Dmitry Kasatkin wrote: >>> From: Dmitry Kasatkin <dmitry.kasatkin@xxxxxxxxx> >>> >>> Adds the multi-precision-integer maths library which was originally taken >>> from GnuPG and ported to the kernel by (among others) David Howells. >>> This version is taken from Fedora kernel 2.6.32-71.14.1.el6. >>> This library is used to implemenet RSA digital signature verification >>> used in IMA/EVM integrity protection subsystem. > Was there a particular reason to select the GnuPG mpi lib? Why not > include gmp (the gnupg mpi lib is a very old fork of gmp), or some other > big number library? > GNUPG MPI kernel port was available and has shown the best performance comparing to other kernel implementations such as LibTomMath and once other rsa implementation.. In fact I took libtommath from your cryptodev-linux#newapi project. I have patches and RSA implementation in my git trees. IIRC performance was about twice worse than in Gnupg MPI lib... - Dmitry - Dmitry > regards, > Nikos > -- > To unsubscribe from this list: send the line "unsubscribe linux-security-module" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html