linux-kernel - Re: Module signing and post-quantum crypto public key algorithms

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <aFSbsteSI9xTRA1Q@gondor.apana.org.au>
Date: Fri, 20 Jun 2025 07:22:26 +0800
From: Herbert Xu <herbert@...dor.apana.org.au>
To: Lukas Wunner <lukas@...ner.de>
Cc: David Howells <dhowells@...hat.com>,
	Stephan Mueller <smueller@...onox.de>, Simo Sorce <simo@...hat.com>,
	torvalds@...ux-foundation.org, Paul Moore <paul@...l-moore.com>,
	Ignat Korchagin <ignat@...udflare.com>,
	Clemens Lang <cllang@...hat.com>,
	David Bohannon <dbohanno@...hat.com>,
	Roberto Sassu <roberto.sassu@...wei.com>, keyrings@...r.kernel.org,
	linux-crypto@...r.kernel.org, linux-security-module@...r.kernel.org,
	linux-kernel@...r.kernel.org,
	Jonathan Cameron <Jonathan.Cameron@...wei.com>
Subject: Re: Module signing and post-quantum crypto public key algorithms

On Thu, Jun 19, 2025 at 02:31:40PM +0200, Lukas Wunner wrote:
>
> I assume Herbert will insist that any new algorithm is hardened
> against side channel attacks.  Thankfully, Stephan seems to have
> put some effort into that:

No I think we should instead only support public keys.  There is
no valid use-case for private keys in the kernel.

Cheers,
-- 
Email: Herbert Xu <herbert@...dor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt