Security computation within Linux kernel

Security computation within Linux kernel

[JanuGerman]

Hi every one,

I have one question regarding security libraries, already shipped with Linux Kernel. That is, all PKI, RSA libraries, as provided by OpenSSL are already integrated within the linux kernel source code? OR, one have to use OpenSSL seperately in this regard. 

I can see, linux/crypto.h and linux/hash.h files shipped with 2.6 kernel and know that SHA1 "hashing" can be done using linux/hash.h, but beside that, any possiblity for RSA or PKI.

If yes, any link to their use, will be highly appreciated.


Best,
JG


		
___________________________________________________________ 
Copy addresses and emails from any email account to Yahoo! Mail - quick, easy and free. http://uk.docs.yahoo.com/trueswitch2.html

Re: Security computation within Linux kernel

[Lee Revell]

On 4/8/07, JanuGerman <doublemalam@yahoo.co.uk> wrote:
> Hi every one,
>
> I have one question regarding security libraries, already shipped with Linux Kernel. That is, all PKI, RSA libraries, as provided by OpenSSL are already integrated within the linux kernel source code? OR, one have to use OpenSSL seperately in this regard.
>
> I can see, linux/crypto.h and linux/hash.h files shipped with 2.6 kernel and know that SHA1 "hashing" can be done using linux/hash.h, but beside that, any possiblity for RSA or PKI.

What do you expect the kernel to use PKI for?  That's userspace stuff.

What problem are you trying to solve?

Lee

Re: Security computation within Linux kernel

[Carlo Florendo]

JanuGerman wrote:
> Hi every one,
> 
> I have one question regarding security libraries, already shipped with Linux Kernel. That is, all PKI, RSA libraries, as provided by OpenSSL are already integrated within the linux kernel source code? OR, one have to use OpenSSL seperately in this regard. 

IIRC, The kernel does some encryption functions, involving TCP, NFS, and 
IPsec since all these are part of the kernel itself.

If you intend to write your own apps that have to use encryption functions, 
it would be best to use the relevant encryption libraries, such as OpenSSL.

Thank you very much.

Best Regards,

Carlo


-- 
Carlo Florendo
Softare Engineer/Network Co-Administrator
Astra Philippines Inc.
UP-Ayala Technopark, Diliman 1101, Quezon City
Philippines
http://www.astra.ph

--
The Astra Group of Companies
5-3-11 Sekido, Tama City
Tokyo 206-0011, Japan
http://www.astra.co.jp

Re: Security computation within Linux kernel

[H. Peter Anvin]

Carlo Florendo wrote:
> 
> IIRC, The kernel does some encryption functions, involving TCP, NFS, and 
> IPsec since all these are part of the kernel itself.
> 

Yes, but key management is done in userspace.

	-hpa