Re: [dpdk-dev] [PATCH 0/3] adding op-type crt sign and decrypt

[Ayuj Verma <ayverma@marvell.com>]

Hi Pablo,Fiona


Did you get a chance to look into these.


Thanks and regards

Ayuj Verma

________________________________
From: Ayuj Verma <ayverma@marvell.com>
Sent: 06 February 2019 16:46:17
To: pablo.de.lara.guarch@intel.com
Cc: fiona.trahe@intel.com; dev@dpdk.org; Shally Verma; Sunila Sahu; Kanaka Durga Kotamarthy; Arvind Desai; Ayuj Verma
Subject: [PATCH 0/3] adding op-type crt sign and decrypt

Some PMDs can only support RSA private key operations using CRT keys
(quintuple) only. Thus it is required to add in PMD RSA xform
capability which key type is supported to perform sign and decrypt ops.

Thus add an another op_type RTE_CRYPTO_OP_TYPE_SIGN_CRT and
RTE_CRYPTO_OP_TYPE_DECRYPT_CRT, which would mean perform an private
key op using CRT keys (quintuple) only.

PMD would reflect its capability to support these operations using its
op_type mask. App should query RSA xform capability API to check if
specific op_type is supported, thus call operation with relevant key
type.

Another proposal is, it is not known if non-crt keys is used at all to
perform otherwise naturally slow RSA private keys operations.
So, it is also possible to deprecate RSA_KEY_TYPE_EXPONENT altogether
and just use quintuple key type for private key operations.
In that case, there is no need to add another SIGN/DECRYPT_CRT variant,
current SIGN and DECRYPT operation default to using quintuple RSA keys.

Ayuj Verma (3):
  lib/cryptodev: add crt sign and decrypt ops
  crypto/openssl: update op-type mask with crt ops
  test/crypto: check for rsa capa for op-type

 drivers/crypto/openssl/rte_openssl_pmd_ops.c |  4 +-
 lib/librte_cryptodev/rte_crypto_asym.h       |  8 ++++
 test/test/test_cryptodev_asym.c              | 47 ++++++++++++++++++++
 3 files changed, 58 insertions(+), 1 deletion(-)

--
2.20.0