Skip to contentSkip to conversation

Trouble with non modular ciphers

DISCUSSION Andi Kleen 4 participants 7 messages Jan 31, 2008 – Feb 4, 2008 Crypto API

lore
Share & tools
lore

Andi Kleen

author
#0 lore raw

FYI -- with a linus git kernel of yesterday or so I ran into a problem where one cipher module (CBC) was compiled in and the rest modular. dm_crypt could not resolve the cipher module until I turned it into a module. I don't remember if cryptomanager was modular or not.

I don't have the exact configuration anymore unfortunately, but just wanted to report the problem.

Also I found that cryptomanager is quite unhappy when CONFIG_KMOD is not defined. Perhaps it should Kconfig select it?

-Andi

#1 lore raw
Quoted 3 lines · * Andi Kleen | 2008-01-31 10:21:24 [+0100]:

FYI -- with a linus git kernel of yesterday or so I ran into a problem where one cipher module (CBC) was compiled in and the rest modular. dm_crypt could not resolve the cipher module until I turned it into a module.

and dm_crypt itself was a module?

Quoted 2 lines

I don't remember if cryptomanager was modular or not.
From what I see, if CBC is in kernel than cryptomanager is also compiled

in.

Quoted 2 lines

Also I found that cryptomanager is quite unhappy when CONFIG_KMOD is not defined. Perhaps it should Kconfig select it?

If you disable modules, than why should one module enable it?

Quoted 1 line

-Andi

Sebastian

author
#2 lore raw
Quoted 6 lines · On Thursday 31 January 2008 13:48:34 Sebastian Siewior wrote:
Quoted 3 lines · * Andi Kleen | 2008-01-31 10:21:24 [+0100]:

FYI -- with a linus git kernel of yesterday or so I ran into a problem where one cipher module (CBC) was compiled in and the rest modular. dm_crypt could not resolve the cipher module until I turned it into a module.

and dm_crypt itself was a module?

I don't remember to be honest. Is it important?

Quoted 3 lines
Quoted 2 lines

Also I found that cryptomanager is quite unhappy when CONFIG_KMOD is not defined. Perhaps it should Kconfig select it?

If you disable modules, than why should one module enable it?

CONFIG_KMOD is not modules (that is CONFIG_MODULES), but module autoloading.

-Andi

#3 lore raw
Quoted 9 lines · * Andi Kleen | 2008-01-31 13:49:54 [+0100]:
Quoted 6 lines · On Thursday 31 January 2008 13:48:34 Sebastian Siewior wrote:
Quoted 3 lines · * Andi Kleen | 2008-01-31 10:21:24 [+0100]:

FYI -- with a linus git kernel of yesterday or so I ran into a problem where one cipher module (CBC) was compiled in and the rest modular. dm_crypt could not resolve the cipher module until I turned it into a module.

and dm_crypt itself was a module?

I don't remember to be honest. Is it important?

It could be possible that dm_crypt is trying to use the crypto API before it is initialized, but I doubt it.

Quoted 7 lines
Quoted 4 lines
Quoted 3 lines

Also I found that cryptomanager is quite unhappy when CONFIG_KMOD is not defined. Perhaps it should Kconfig select it?

If you disable modules, than why should one module enable it?

CONFIG_KMOD is not modules (that is CONFIG_MODULES), but module autoloading.

Ach, you right. This problem has every user of try_then_request_module() and I don't see anybody selecting CONFIG_KMOD in the kernel.

Quoted 1 line

-Andi

Sebastian

maintainer
#4 lore raw
In reply to Andi Kleen
Quoted 8 lines · Andi Kleen

FYI -- with a linus git kernel of yesterday or so I ran into a problem where one cipher module (CBC) was compiled in and the rest modular. dm_crypt could not resolve the cipher module until I turned it into a module. I don't remember if cryptomanager was modular or not.

I don't have the exact configuration anymore unfortunately, but just wanted to report the problem.

OK, I couldn't find anything bad from looking through the Kconfig. What happens if you try to build it in again?

Quoted 2 lines

Also I found that cryptomanager is quite unhappy when CONFIG_KMOD is not defined. Perhaps it should Kconfig select it?

Good point. Yes we should do that.

Cheers,

Signature · 4 lines
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <[email protected]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
#5 lore raw

Async Linux NETKEY (IPSec Stack)

Hi Herbert,

I just want to check on the status of Linux NETKEY change to support asynchronous Linux CryptoAPI interface. Have ESP, AH, and AEAD changes to make use of async API?

In addition, I submitted async HASH and DIGEST patch over a week ago. Any comments and whether it will be accepted?

Thanks,
Loc

maintainer
#6 lore raw

Re: Async Linux NETKEY (IPSec Stack)

Quoted 7 lines · Loc Ho

I just want to check on the status of Linux NETKEY change to support asynchronous Linux CryptoAPI interface. Have ESP, AH, and AEAD changes to make use of async API?

In addition, I submitted async HASH and DIGEST patch over a week ago. Any comments and whether it will be accepted?

Sorry but I'm currently travelling so I can't give your patches the proper attention. I'll look at them as soon as things quiten down in a couple of weeks.

Thanks,

Signature · 4 lines
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <[email protected]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt