3 ms·

Isn't there already userspace access to the kernel's crypto machinery? https://www.kernel.org/doc/html/latest/crypto/userspace-if.html https://www.kernel.org/d

• simcop2387 4y ago
  Doing it through vdso has performance advantages because it elides a lot of the syscall overhead. This works make the crypto stack be more advantageous they it was previously
• fefe23 4y ago
  You are right, I was not aware of that! This way may actually have advantages over vDSO. Maybe you can set up IV and key with the kernel and then let the kernel do the crypto without having to have them in user space memory anymore. That would be a way to reduce risk in crypto applications, as long as you can prevent an attacker who has taken over the crypto app to retrieve the keys from the kernel. Maybe seccomp can help here. Very exciting!