Re: [RFC v1.1 1/5] crypto: GnuPG based MPI lib

[Dmitry Kasatkin <dmitry.kasatkin@intel.com>]

On 17/08/11 14:38, Nikos Mavrogiannopoulos wrote:
> On Mon, Aug 15, 2011 at 6:12 PM, Dmitry Kasatkin
> <dmitry.kasatkin@intel.com> wrote:
>> On 11/08/11 20:20, Dmitry Kasatkin wrote:
>>> From: Dmitry Kasatkin <dmitry.kasatkin@nokia.com>
>>>
>>> Adds the multi-precision-integer maths library which was originally taken
>>> from GnuPG and ported to the kernel by (among others) David Howells.
>>> This version is taken from Fedora kernel 2.6.32-71.14.1.el6.
>>> This library is used to implemenet RSA digital signature verification
>>> used in IMA/EVM integrity protection subsystem.
> Was there a particular reason to select the GnuPG mpi lib? Why not
> include gmp (the gnupg mpi lib is a very old fork of gmp), or some other
> big number library?
>
GNUPG MPI kernel port was available and has shown the best performance
comparing to other kernel implementations
such as LibTomMath and once other rsa implementation..

In fact I took libtommath from your cryptodev-linux#newapi project.
I have patches and RSA implementation in my git trees.
IIRC performance was about twice worse than in Gnupg MPI lib...

- Dmitry



- Dmitry

> regards,
> Nikos
> --
> To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html