Received: by 2002:ac0:946b:0:0:0:0:0 with SMTP id j40csp1367600imj; Thu, 7 Feb 2019 23:47:27 -0800 (PST) X-Google-Smtp-Source: AHgI3Ib0hguNiumETHLSIuuExGYcP+lP8+IXoAZ6N2Jk2VNpbiqPFciaCUvRUEA+jSl4BplZgbCn X-Received: by 2002:a62:6385:: with SMTP id x127mr21077426pfb.15.1549612047855; Thu, 07 Feb 2019 23:47:27 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1549612047; cv=none; d=google.com; s=arc-20160816; b=NXEgtRHl1gUpzHZqJrAsKkwdOJhu2G1YS9u/TNuTlANbkUFcLlXhm6C83YiT0SEEAd sDF56f2XZ2I4RTteV6orI8CF+V0LRDjT4u8dblNnKclZJVE5AKxekNAxX+A4SGoBPzR0 rjDJDbMld3u56+g+Bxht7OKv/ryIMigkJXdQg0KSv7dbImZK6dFv4NKZpfxCSA1U8nnY glEdEct4vw8vlN9eQuzwJ5j0O0KJnJwFB+Smvzcx8S78HPSaw4+fszIkIhJas+cyDYKT uJgZ15zq1xlUAKaDnJvcgNDvQ/A/pHkO85lfwGPxI5yF1MameuuIbT3xtvnMLRH5beda KvUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=k7HNn3r2j8AXCFHzLf/dp6Z1jl0wfAdvCtEDSBKoSJc=; b=iqC8tg6ZzRs50sV4hM3V2dY5MwiQ2eLAdGiE89mZx/wj0b2FBwrzUwRMWvVQm20Juo FpW1/9KaAhRc8dXN1L1zPzgHbCP+S712Fr5A3QwrYZEg03cix9t6bPZ07tdts0JpsL58 yzIEWtMCcs6k8/e4ODW6Y7qj3JeYcMQsQT2mLLu+CR2r1FqD3+vXo2Bc+p8TrE7qNkAm NxKYiY1oFrP4HrsIQtrM+4lAiBNfXSb+z7l/cP8Ml+9/etM5j+LEJLdpOFqJTKY9B4/z aIQN2SN2iOenn0Vr1MDMoRv6PcA1j+s5C0eXlTltlpuuZ696wKLqKllhnu2qqeYuSYNM Z3fQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id 33si1514459ply.312.2019.02.07.23.47.12; Thu, 07 Feb 2019 23:47:27 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727171AbfBHHqr (ORCPT + 99 others); Fri, 8 Feb 2019 02:46:47 -0500 Received: from orcrist.hmeau.com ([104.223.48.154]:34200 "EHLO deadmen.hmeau.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726004AbfBHHqq (ORCPT ); Fri, 8 Feb 2019 02:46:46 -0500 Received: from gondobar.mordor.me.apana.org.au ([192.168.128.4] helo=gondobar) by deadmen.hmeau.com with esmtps (Exim 4.89 #2 (Debian)) id 1gs0rX-0000jx-H9; Fri, 08 Feb 2019 15:46:15 +0800 Received: from herbert by gondobar with local (Exim 4.89) (envelope-from ) id 1gs0rG-0002RD-5P; Fri, 08 Feb 2019 15:45:58 +0800 Date: Fri, 8 Feb 2019 15:45:58 +0800 From: Herbert Xu To: Stephan Mueller Cc: Eric Biggers , James Bottomley , Andy Lutomirski , "Lee, Chun-Yi" , "Rafael J . Wysocki" , Pavel Machek , linux-kernel@vger.kernel.org, linux-pm@vger.kernel.org, keyrings@vger.kernel.org, "Rafael J. Wysocki" , Chen Yu , Oliver Neukum , Ryan Chen , David Howells , Giovanni Gherdovich , Randy Dunlap , Jann Horn , Andy Lutomirski , linux-crypto@vger.kernel.org Subject: Re: [PATCH v2 0/6] General Key Derivation Function Support Message-ID: <20190208074558.j3k6gw66q4e2y2lv@gondor.apana.org.au> References: <20190103143227.9138-1-jlee@suse.com> <5418064.ltLFQScYi2@tauon.chronox.de> <20190130100854.iey2mbmz6777pn2n@gondor.apana.org.au> <12103603.N4N57GesWC@tauon.chronox.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <12103603.N4N57GesWC@tauon.chronox.de> User-Agent: NeoMutt/20170113 (1.7.2) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Jan 30, 2019 at 03:39:10PM +0100, Stephan Mueller wrote: > Am Mittwoch, 30. Januar 2019, 11:08:54 CET schrieb Herbert Xu: > > Hi Herbert, > > > I'm still not convinced why this needs to go into the crypto API > > instead of being hosted in a helper which should achieve pretty > > much the same result. > > How do you propose to handle the FIPS 140-2 related requirements of enforcing > the integrity test result and the known-answer self tests? We could easily add self-tests for the helper. Cheers, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt