From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757382Ab0IGOjK (ORCPT ); Tue, 7 Sep 2010 10:39:10 -0400 Received: from helcar.apana.org.au ([209.40.204.226]:46120 "EHLO fornost.hengli.com.au" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751910Ab0IGOjB (ORCPT ); Tue, 7 Sep 2010 10:39:01 -0400 Date: Tue, 7 Sep 2010 22:39:00 +0800 From: Herbert Xu To: Christoph Hellwig Cc: Linux Crypto Mailing List , netdev@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: RFC: Crypto API User-interface Message-ID: <20100907143859.GA7448@gondor.apana.org.au> References: <20100907084213.GA4610@gondor.apana.org.au> <20100907140646.GA31921@infradead.org> <20100907141112.GB6903@gondor.apana.org.au> <20100907142427.GA14207@infradead.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20100907142427.GA14207@infradead.org> User-Agent: Mutt/1.5.18 (2008-05-17) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Sep 07, 2010 at 10:24:27AM -0400, Christoph Hellwig wrote: > > I don't think they matter in practice. We have less than a handfull > of drivers for them, and with CPUs gaining proper instructions they > are even less useful. In addition any sane PCI card should just > allow userspace mapping of their descriptors. I totally agree that mainstream CPUs won't need this at all. However we still have embedded users where the CPUs may not be powerful enough per se or where they want to use their CPUs for other work. There are also cases such as the Niagra SPU which may not be easy to manage from user-space (correct me if I'm wrong Dave). > > Now as a side-effect if this means that we can shut the security > > people up about adding another interface then all the better. But > > I will certainly not go out of the way to add more crap to the > > kernel for that purpose. > > So what is the real use case for this? In addition to kernel bloat > the real fear I have is that the security wankers will just configure > the userspace crypto libraries to always use the kernel interface > just in case, and once that happens we will have to deal with the whole > mess. Especially for RHEL and Fedora where the inmantes now run the > asylum in that respect. I will let the security people answer this :) Cheers, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt