linux-kernel - Re: [PATCH 0/6] Add Hygon SEV support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <992c3a3f-8eb2-5286-c9f7-7940fc5ccf55@hygon.cn>
Date:   Tue, 16 Apr 2019 18:28:33 +0800
From:   Hao Feng <fenghao@...on.cn>
To:     Paolo Bonzini <pbonzini@...hat.com>,
        Pascal Van Leeuwen <pvanleeuwen@...idesecure.com>,
        "'Tom Lendacky '" <thomas.lendacky@....com>,
        "'Gary Hook '" <gary.hook@....com>,
        "'Herbert Xu '" <herbert@...dor.apana.org.au>,
        "' David S. Miller '" <davem@...emloft.net>,
        "'Janakarajan Natarajan '" <Janakarajan.Natarajan@....com>,
        "'Joerg Roedel '" <joro@...tes.org>,
        ' Radim Krčmář ' <rkrcmar@...hat.com>,
        "'Thomas Gleixner '" <tglx@...utronix.de>,
        "'Ingo Molnar '" <mingo@...hat.com>,
        "'Borislav Petkov '" <bp@...en8.de>,
        "' H. Peter Anvin '" <hpa@...or.com>
CC:     "'Zhaohui Du '" <duzhaohui@...on.cn>,
        "'Zhiwei Ying '" <yingzhiwei@...on.cn>,
        "'Wen Pu '" <puwen@...on.cn>, "x86@...nel.org" <x86@...nel.org>,
        "linux-crypto@...r.kernel.org" <linux-crypto@...r.kernel.org>,
        "kvm@...r.kernel.org" <kvm@...r.kernel.org>,
        "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH 0/6] Add Hygon SEV support

On 4/16/19 4:09 PM, Paolo Bonzini wrote:
> Useful does not mean secure, does it?  PKZIP encryption was certainly
> useful back in the day, but it was not secure.
> 

Thanks for the comments, quite understand the concern about security
because it is indeed so important. Many people may not hear about
SM2, so it is natural to doubt its security. Actually SM2 is not just China
standard, it is also ISO/IEC standard, this fact should give us some
confidence about its security.

You can get more information about SM2 from below ISO/IEC specification.
https://www.iso.org/obp/ui/#iso:std:iso-iec:14888:-3:ed-4:v1:en

-- 
Thanks
Harry