Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1760135AbaGSJSI (ORCPT ); Sat, 19 Jul 2014 05:18:08 -0400 Received: from mail-we0-f180.google.com ([74.125.82.180]:38682 "EHLO mail-we0-f180.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756521AbaGSJSD (ORCPT ); Sat, 19 Jul 2014 05:18:03 -0400 MIME-Version: 1.0 In-Reply-To: <13161.1405626953@warthog.procyon.org.uk> References: <13161.1405626953@warthog.procyon.org.uk> Date: Sat, 19 Jul 2014 12:18:01 +0300 Message-ID: Subject: Re: Making the asymmetric keys config option into a top-level option From: Dmitry Kasatkin To: David Howells Cc: Dmitry Kasatkin , Mimi Zohar , linux-security-module , linux-crypto , "linux-kernel@vger.kernel.org" Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Jul 17, 2014 at 10:55 PM, David Howells wrote: > Dmitry Kasatkin wrote: > >> When ASYMMETRIC_KEYS=y, but depends on CRYPTO=m, selections will be also modules. >> In random config case OID_REGISTRY, MPILIB and ASN1 became modules producing build >> break. This patch removes asymmetric keys dependency from CRYPTO, but instead >> selects CRYPTO and CRYPTO_HASH as they are needed. > > You do realise that this makes the asymmetric key config option into a > top-level option? I think, logically, that's the wrong thing to do. They > should still appear under the crypto menu. > Oops, this is not what I wanted to have. Yes, I wanted to have still them under crypto but wanted to break dependency. I was hurrying before starting the holidays, tested only from command line, but did not look to menuconfig. In overall asymmetric keys does not provide any crypto API. Instead they provide key types... They use crypto api them in couple of places. So it is more about "selecting" crypto. In my opinion "entire" location of asymmetric keys under /crypto is wrong. RSA algo may be there, but reset of the stuff can be under /keys. -Dmitry > Note that I think your patch is really the wrong solution. The right solution > is to fix the configuration tools - but that's quite an undertaking. > > David -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/