mirror of
https://github.com/torvalds/linux.git
synced 2026-09-19 09:08:02 +02:00
068f5a0095
Currently the kernel's TCP-AO implementation does the MAC and KDF computations using the crypto_ahash API. This API is inefficient and difficult to use, and it has required extensive workarounds in the form of per-CPU preallocated objects (tcp_sigpool) to work at all. Let's use lib/crypto/ instead. This means switching to straightforward stack-allocated structures, virtually addressed buffers, and direct function calls. It also means removing quite a bit of error handling. This makes TCP-AO quite a bit faster. This also enables many additional cleanups, which later commits will handle: removing tcp-sigpool, removing support for crypto_tfm cloning, removing more error handling, and replacing more dynamically-allocated buffers with stack buffers based on the now-statically-known limits. Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Signed-off-by: Eric Biggers <ebiggers@kernel.org> Link: https://patch.msgid.link/20260427172727.9310-3-ebiggers@kernel.org Signed-off-by: Paolo Abeni <pabeni@redhat.com> |
||
|---|---|---|
| .. | ||
| lib | ||
| .gitignore | ||
| bench-lookups.c | ||
| config | ||
| connect-deny.c | ||
| connect.c | ||
| icmps-accept.c | ||
| icmps-discard.c | ||
| key-management.c | ||
| Makefile | ||
| restore.c | ||
| rst.c | ||
| self-connect.c | ||
| seq-ext.c | ||
| setsockopt-closed.c | ||
| settings | ||
| unsigned-md5.c | ||