From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932625Ab1IAQTE (ORCPT ); Thu, 1 Sep 2011 12:19:04 -0400 Received: from mail-ww0-f42.google.com ([74.125.82.42]:43286 "EHLO mail-ww0-f42.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752695Ab1IAQTD (ORCPT ); Thu, 1 Sep 2011 12:19:03 -0400 Message-ID: <4E5FB074.6000404@gnutls.org> Date: Thu, 01 Sep 2011 18:19:00 +0200 From: Nikos Mavrogiannopoulos User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.20) Gecko/20110820 Icedove/3.1.12 MIME-Version: 1.0 To: David Miller CC: herbert@gondor.hengli.com.au, phil@nwl.cc, cryptodev-linux-devel@gna.org, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: comparison of the AF_ALG interface with the /dev/crypto References: <20110901145902.GA31834@gondor.apana.org.au> <20110901.113234.755815899606372879.davem@davemloft.net> In-Reply-To: <20110901.113234.755815899606372879.davem@davemloft.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 09/01/2011 05:32 PM, David Miller wrote: > From: Nikos Mavrogiannopoulos > Date: Thu, 1 Sep 2011 17:06:06 +0200 > >> It would be interesting to have a partial kernel-space TLS >> implementation but I don't know whether such a thing could ever make >> it to kernel. > Herbert and I have discussed this several times and we plan on > implementing this at some point. The problem is that TLS is not a universal thing. There is still SSH, kerberos, openvpn (as far as I remember it is a custom protocol), etc. It makes sense to have something to apply broadly, especially when it is in the Linux kernel. Currently have a device such as /dev/crypto looks like a good compromise. regards, Nikos