linux-kernel - Re: [PATCH v7 0/4] Add support for x509 certs with NIST p256 and p192 keys

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 2 Feb 2021 14:59:18 +1100
From:   Herbert Xu <herbert@...dor.apana.org.au>
To:     Stefan Berger <stefanb@...ux.ibm.com>
Cc:     David Howells <dhowells@...hat.com>, keyrings@...r.kernel.org,
        linux-crypto@...r.kernel.org, davem@...emloft.net,
        zohar@...ux.ibm.com, linux-kernel@...r.kernel.org,
        patrick@...terwijk.org, linux-integrity@...r.kernel.org
Subject: Re: [PATCH v7 0/4] Add support for x509 certs with NIST p256 and
 p192 keys

On Mon, Feb 01, 2021 at 11:45:16AM -0500, Stefan Berger wrote:
>
> With the crypto module missing in the kernel you will get an error trying to
> load an x509 certificate that needs the algorithm to verify the self-signed
> signature.
> 
> Before I post yet another series I hope that Herbert can say whether option
> 1) would work for him.

Please be patient.  We need to make sure that whatever scheme you
use for your algorithm also works for the driver authors who are
working in the same area.  Because if we end up having to change
the scheme then that'll just create more churn for you and David.

Thanks,
-- 
Email: Herbert Xu <herbert@...dor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt