[EXT] [PATCH v6 3/4] crypto: caam - add in-kernel interface for blob generator

Pankaj Gupta pankaj.gupta at nxp.com
Mon Mar 28 09:29:12 UTC 2022


Hi Ahmad,

Please find the comments in-line.

Regards
Pankaj

> -----Original Message-----
> From: Ahmad Fatoum <a.fatoum at pengutronix.de>
> Sent: Thursday, March 24, 2022 3:40 PM
> To: Pankaj Gupta <pankaj.gupta at nxp.com>; Horia Geanta
> <horia.geanta at nxp.com>; Herbert Xu <herbert at gondor.apana.org.au>;
> David S. Miller <davem at davemloft.net>
> Cc: linux-security-module at vger.kernel.org; Eric Biggers
> <ebiggers at kernel.org>; David Gstir <david at sigma-star.at>; Matthias
> Schiffer <matthias.schiffer at ew.tq-group.com>; Sumit Garg
> <sumit.garg at linaro.org>; Jan Luebbe <j.luebbe at pengutronix.de>; Richard
> Weinberger <richard at nod.at>; tharvey at gateworks.com; Franck Lenormand
> <franck.lenormand at nxp.com>; James Morris <jmorris at namei.org>; Mimi
> Zohar <zohar at linux.ibm.com>; linux-kernel at vger.kernel.org; David Howells
> <dhowells at redhat.com>; Jarkko Sakkinen <jarkko at kernel.org>;
> keyrings at vger.kernel.org; linux-crypto at vger.kernel.org;
> kernel at pengutronix.de; linux-integrity at vger.kernel.org; James Bottomley
> <jejb at linux.ibm.com>; Serge E. Hallyn <serge at hallyn.com>
> Subject: Re: [EXT] [PATCH v6 3/4] crypto: caam - add in-kernel interface for
> blob generator
> 
> Caution: EXT Email
> 
> Hello Pankaj,
> 
> On 24.03.22 10:55, Pankaj Gupta wrote:
> > Hi Ahmad,
> >
> > Please find the comments in-line.
> 
> Thanks for you review.
> 
> > Suggest to continue to use two separate descriptor-creation-function for
> 'encap' and 'decap'.
> > This will help these API(s) to be maintained easily going forward.
> 
> We can still split them up in future once there is a real need.
> But currently they are exactly the same, except for input/output length, so I
> think it's correct to not introduce duplication unless needed.
> 
> >>   - use append_seq_(in|out)_ptr_intlen for both encap/decap as a
> >> result
> 
> Case in point. The intlen omission was because the two functions are largely
> identical and I only fixed up one of them. This is prone to repeat when we go
> back to have identical code with minor differences.
> 
> > In continuation to the previous comment, there is another suggestion:
> >
> > Either:
> > struct keyblob_info {
> >         void *key;
> >         size_t key_len;
> >
> >         void *blob;
> >         size_t blob_len;
> >
> >         size_t key_mod_len;
> >         const void *key_mod;
> > };
> 
> I can do that.
> 

Please do. Thanks.
Patch 4/4, needs to be re-worked to.

> Whats your opinion on the desc size computation? Comment the macro or
> add the static inline helper?
> 

Comment the macro is fine.

> Cheers,
> Ahmad
> 
> --
> Pengutronix e.K.                           |                             |
> Steuerwalder Str. 21                       |
> https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.
> pengutronix.de%2F&data=04%7C01%7Cpankaj.gupta%40nxp.com%7C4
> d60f0d524a04b7cbd7b08da0d7e7d21%7C686ea1d3bc2b4c6fa92cd99c5c30163
> 5%7C0%7C0%7C637837134158793951%7CUnknown%7CTWFpbGZsb3d8eyJWI
> joiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3
> 000&sdata=PetvZm8teusBwQ4BeZ1VLEOvBlCrZ2k2bNG3SJBEXPw%3D&
> amp;reserved=0  |
> 31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
> Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |



More information about the Linux-security-module-archive mailing list