On Fri, 19 Nov 2021, Stephan Müller wrote:
The kernel crypto API provides the SP800-108 counter KDF implementation. Thus, the separate implementation provided as part of the keys subsystem can be replaced with calls to the KDF offered by the kernel crypto API. The keys subsystem uses the counter KDF with a hash primitive. Thus, it only uses the call to crypto_kdf108_ctr_generate. Signed-off-by: Stephan Mueller <smueller@xxxxxxxxxx> --- security/keys/Kconfig | 2 +- security/keys/dh.c | 109 +++++++----------------------------------- 2 files changed, 19 insertions(+), 92 deletions(-)
Acked-by: Mat Martineau <mathew.j.martineau@xxxxxxxxxxxxxxx> -- Mat Martineau Intel
