linux-kernel - Re: virtio-crypto: Inquiry about virtio crypto

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <8b902563-4cb6-5409-4339-1afecc26803a@loongson.cn>
Date: Thu, 27 Nov 2025 17:38:39 +0800
From: Bibo Mao <maobibo@...ngson.cn>
To: "Gonglei (Arei)" <arei.gonglei@...wei.com>
Cc: "linux-crypto@...r.kernel.org" <linux-crypto@...r.kernel.org>,
 "virtualization@...ts.linux.dev" <virtualization@...ts.linux.dev>,
 linux-kernel <linux-kernel@...r.kernel.org>,
 QEMU devel <qemu-devel@...gnu.org>
Subject: Re: virtio-crypto: Inquiry about virtio crypto


Hi gonglei,

Sorry to bother you again.

I notice that numa node is supported with virtio-crypto device. Is there 
multiple PCIE root bridges with different numa nodes supported on some 
VM models?

I ask this question because I do not know whether it is possible to 
preallocate virtio_crypto_op_data_req buffer and IV buffer within 
structure virtio_crypto_sym_request. Only that there is no node 
information when virtio_crypto_sym_request is allocated.

Regards
Bibo Mao


On 2025/11/27 上午10:56, Gonglei (Arei) wrote:
> Hi,
> 
>> -----Original Message-----
>> From: Bibo Mao <maobibo@...ngson.cn>
>> Sent: Thursday, November 27, 2025 9:43 AM
>> To: Gonglei (Arei) <arei.gonglei@...wei.com>
>> Cc: linux-crypto@...r.kernel.org; virtualization@...ts.linux.dev; linux-kernel
>> <linux-kernel@...r.kernel.org>; QEMU devel <qemu-devel@...gnu.org>
>> Subject: virtio-crypto: Inquiry about virtio crypto
>>
>> Hi gonglei,
>>
>>      I am investigating how to use HW crypto accelerator in VM. It seems that
>> virtio-crypto is one option, however only aes skcipher algo is supported and
> 
> Actually akcipher service had been supported by virtio-crypto in 2022.
> 
>> virtio-crypto device is not suggested by RHEL 10.
>>
>> https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html
>> /configuring_and_managing_linux_virtual_machines/feature-support-and-limit
>> ations-in-rhel-10-virtualization
>>
>>     I want to know what is the potential issued with virtio-crypto.
>>
> 
> This question is too big, maybe you'd better ask RHEL guys. :(
> 
> Regards,
> -Gonglei
> 
>> Regards
>> Bibo Mao
> 
>