From: Stephan Mueller <smueller@chronox.de>
Subject: Re: communicating from the user space
Date: Mon, 23 Feb 2015 09:18:19 +0100
Message-ID: <1465303.BM7DbpydIc@tachyon.chronox.de>
References: <CAHTT9VLmj8A7V5t+P9Zc02r5nyv37VMfa=QwPOuiMS9WFdXUxg@mail.gmail.com> <1424640392.22199.3.camel@gnutls.org> <CAHTT9VLJH4RFXBmGUeLSiiYjsvytb10NT+DyPeBkceVzuq3uRQ@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7Bit
Cc: Nikos Mavrogiannopoulos <nmav@gnutls.org>,
	"linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>
To: sri sowj <srisowj4linux@gmail.com>
Return-path: <linux-crypto-owner@vger.kernel.org>
Received: from mail.eperm.de ([89.247.134.16]:60291 "EHLO mail.eperm.de"
	rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
	id S1752238AbbBWISV (ORCPT <rfc822;linux-crypto@vger.kernel.org>);
	Mon, 23 Feb 2015 03:18:21 -0500
Received: from tachyon.chronox.de
	by mail.eperm.de with [XMail 1.27 ESMTP Server]
	id <S169CA> for <linux-crypto@vger.kernel.org> from <smueller@chronox.de>;
	Mon, 23 Feb 2015 09:18:19 +0100
In-Reply-To: <CAHTT9VLJH4RFXBmGUeLSiiYjsvytb10NT+DyPeBkceVzuq3uRQ@mail.gmail.com>
Sender: linux-crypto-owner@vger.kernel.org
List-ID: <linux-crypto.vger.kernel.org>

Am Montag, 23. Februar 2015, 09:36:22 schrieb sri sowj:

Hi sri,

> Hi Nikos,
> 
> Please can you let me know my understanding regarding openssl and
> crypto are correct?
> I have mentioned my understanding in my earlier posts,but let me
> mention it here again.
> 
> I want to interact with Crypto Hardware from user space using openssl
> like libraries based applications through cryptodev-linux interface.
> 
> it looks like openssl comes with cryptodev-linux support(through
> eng_cryptodev.c) .
> When I downloaded openssl,eng_cryptodev.c file is available by default.
> 
> below link refers about eng_cryptodev.c for openssl support :
> 
> http://repo.or.cz/w/cryptodev-linux.git/commitdiff/56cc4e3b8b761cb34f928f4ee
> e59755d1f0afc53
> 
> Note:looks like there are some additional changes done on
> eng_cryptodev.c file available in updated openssl source code.
> 
> There seems to be some changes/patches  also available recently for
> cryptodev-linux,below contains reference information.
> 
> http://rt.openssl.org/Ticket/Display.html?id=2770&user=guest&pass=guest
> 
> 
> Please let me know if my understanding is incorrect .
> 
> one more thing while compiling openssl with above mentioned changes I
> faced compilation issues in linux ,Please can you also let me know
> whether there are per-requisites like any dependent libraries or
> installing cryptodev-linux on host/target machine before compiling
> openssl etc?

Per default, you lack the kernel side support (there is no /dev/crypto) unless 
you patch your kernel. Thus, that cryptodev support in OpenSSL is not used on 
default kernels.
> 
> BR,
> Srisowj
> 
> 
> On Mon, Feb 23, 2015 at 2:56 AM, Nikos Mavrogiannopoulos
> 
> <nmav@gnutls.org> wrote:
> > On Sun, 2015-02-22 at 16:04 +0100, Stephan Mueller wrote:
> >> Am Sonntag, 22. Februar 2015, 18:32:34 schrieb sri sowj:
> >> 
> >> Hi sri,
> >> 
> >> > Hi Stephen,
> >> > 
> >> > It was a great information with respective PF_ALG , I have explored a
> >> > bit on openssl and algorithms prospect , Please let me know if
> >> > anything to add to it.
> >> > 
> >> > openssl crypto engine:
> >> > 
> >> > below are the steps to enable openssl to communicate using pf/af_alg.
> >> > 
> >> > #1:git clone http://src.carnivore.it/users/common/af_alg/
> >> 
> >> Yes, that is it. But it is not fully efficient as it does not use
> >> vmsplice
> >> where appropriate. So, libkcapi should be faster in several use cases.
> > 
> > When would vmsplice be appropriate? As far as I understand vmsplice adds
> > a cost on operations for small data, which is the majority of use cases
> > in crypto. In the measurements I did for cryptodev-linux [0] vmsplice
> > did improve performance only for more than 64k packets which is never
> > the case with real world crypto (TLS has a maximum of 14k for example).
> > 
> > regards,
> > Nikos
> > 
> > [0]. http://cryptodev-linux.org/comparison.html
> > 
> > 
> > --
> > To unsubscribe from this list: send the line "unsubscribe linux-crypto" in
> > the body of a message to majordomo@vger.kernel.org
> > More majordomo info at  http://vger.kernel.org/majordomo-info.html


-- 
Ciao
Stephan