Am Mittwoch, 28. Oktober 2015, 08:43:16 schrieb David Woodhouse: Hi David, > > Albeit that all sounds like the crown jewel, how do you propose that shall > > happen? > > > > Assume that you have a web server that has a pub and priv key in its > > current configuration -- I guess that is the vast majority of configs. > > > > Can you please elaborate how the process for such a web server shall > > really > > work? > > 1. Create a kernel-side key. > 2. Use it. > > That may require adding an API similar to the one you're proposing, but > working with kernel keys instead of directly with akcipher. Or perhaps > the key subsystem can already offer what you need in userspace. David? Ohh, I see. So, you are saying that there should not be a setpub/privkey for the akcipher AF_ALG interface?! If somebody wants to use akcipher, he shall set the key via the keyring and akcipher shall obtain it from the keyring? However, for the actual data shoveling, AF_ALG should still be used? -- Ciao Stephan -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
