virtio-crypto: Inquiry about virtio crypto

virtio-crypto: Inquiry about virtio crypto

[Bibo Mao]

Hi gonglei,

    I am investigating how to use HW crypto accelerator in VM. It seems 
that virtio-crypto is one option, however only aes skcipher algo is 
supported and virtio-crypto device is not suggested by RHEL 10.
 
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/configuring_and_managing_linux_virtual_machines/feature-support-and-limitations-in-rhel-10-virtualization

   I want to know what is the potential issued with virtio-crypto.

Regards
Bibo Mao

RE: virtio-crypto: Inquiry about virtio crypto

[Gonglei (Arei)]

Hi,

> -----Original Message-----
> From: Bibo Mao <maobibo@loongson.cn>
> Sent: Thursday, November 27, 2025 9:43 AM
> To: Gonglei (Arei) <arei.gonglei@huawei.com>
> Cc: linux-crypto@vger.kernel.org; virtualization@lists.linux.dev; linux-kernel
> <linux-kernel@vger.kernel.org>; QEMU devel <qemu-devel@nongnu.org>
> Subject: virtio-crypto: Inquiry about virtio crypto
> 
> Hi gonglei,
> 
>     I am investigating how to use HW crypto accelerator in VM. It seems that
> virtio-crypto is one option, however only aes skcipher algo is supported and

Actually akcipher service had been supported by virtio-crypto in 2022.

> virtio-crypto device is not suggested by RHEL 10.
> 
> https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html
> /configuring_and_managing_linux_virtual_machines/feature-support-and-limit
> ations-in-rhel-10-virtualization
> 
>    I want to know what is the potential issued with virtio-crypto.
> 

This question is too big, maybe you'd better ask RHEL guys. :(

Regards,
-Gonglei

> Regards
> Bibo Mao

Re: virtio-crypto: Inquiry about virtio crypto

[Bibo Mao]

On 2025/11/27 上午10:56, Gonglei (Arei) wrote:
> Hi,
> 
>> -----Original Message-----
>> From: Bibo Mao <maobibo@loongson.cn>
>> Sent: Thursday, November 27, 2025 9:43 AM
>> To: Gonglei (Arei) <arei.gonglei@huawei.com>
>> Cc: linux-crypto@vger.kernel.org; virtualization@lists.linux.dev; linux-kernel
>> <linux-kernel@vger.kernel.org>; QEMU devel <qemu-devel@nongnu.org>
>> Subject: virtio-crypto: Inquiry about virtio crypto
>>
>> Hi gonglei,
>>
>>      I am investigating how to use HW crypto accelerator in VM. It seems that
>> virtio-crypto is one option, however only aes skcipher algo is supported and
> 
> Actually akcipher service had been supported by virtio-crypto in 2022.
I am studying virtio-crypto and want to add sm4 algo with skcipher on 
it. Hope to get some guidances and work together on it in future :)

Regards
Bibo Mao
> 
>> virtio-crypto device is not suggested by RHEL 10.
>>
>> https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html
>> /configuring_and_managing_linux_virtual_machines/feature-support-and-limit
>> ations-in-rhel-10-virtualization
>>
>>     I want to know what is the potential issued with virtio-crypto.
>>
> 
> This question is too big, maybe you'd better ask RHEL guys. :(
> 
> Regards,
> -Gonglei
> 
>> Regards
>> Bibo Mao
> 
> 

Re: virtio-crypto: Inquiry about virtio crypto

[Bibo Mao]

Hi gonglei,

Sorry to bother you again.

I notice that numa node is supported with virtio-crypto device. Is there 
multiple PCIE root bridges with different numa nodes supported on some 
VM models?

I ask this question because I do not know whether it is possible to 
preallocate virtio_crypto_op_data_req buffer and IV buffer within 
structure virtio_crypto_sym_request. Only that there is no node 
information when virtio_crypto_sym_request is allocated.

Regards
Bibo Mao


On 2025/11/27 上午10:56, Gonglei (Arei) wrote:
> Hi,
> 
>> -----Original Message-----
>> From: Bibo Mao <maobibo@loongson.cn>
>> Sent: Thursday, November 27, 2025 9:43 AM
>> To: Gonglei (Arei) <arei.gonglei@huawei.com>
>> Cc: linux-crypto@vger.kernel.org; virtualization@lists.linux.dev; linux-kernel
>> <linux-kernel@vger.kernel.org>; QEMU devel <qemu-devel@nongnu.org>
>> Subject: virtio-crypto: Inquiry about virtio crypto
>>
>> Hi gonglei,
>>
>>      I am investigating how to use HW crypto accelerator in VM. It seems that
>> virtio-crypto is one option, however only aes skcipher algo is supported and
> 
> Actually akcipher service had been supported by virtio-crypto in 2022.
> 
>> virtio-crypto device is not suggested by RHEL 10.
>>
>> https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html
>> /configuring_and_managing_linux_virtual_machines/feature-support-and-limit
>> ations-in-rhel-10-virtualization
>>
>>     I want to know what is the potential issued with virtio-crypto.
>>
> 
> This question is too big, maybe you'd better ask RHEL guys. :(
> 
> Regards,
> -Gonglei
> 
>> Regards
>> Bibo Mao
> 
>