The Linux Crypto API
summary
Describes problems with over‑abstraction in the Linux Crypto API and the specific kernel patches and OpenSSL fixes implemented to address them. Covers how the kernel crypto device interface and ARMv8 crypto instructions are used by drivers and accelerators, presents runtime measurements showing big performance and power differences, demonstrates proof‑of‑concept hardware and drivers that improve throughput, and documents real bugs including timing attacks from table lookups and insecure/slow behavior from async vs sync provider choices.
AI-written summary · about
chapters (10)
- 0:00Linux Crypto API intro
- 3:14What Crypto API isn't for
- 7:10Encryption in block layer
- 13:26Crypto API design
- 22:37Provider library & transforms
- 26:39Symmetric cipher use cases
- 34:16Stream cipher security
- 40:24Block cipher modes examples
- 45:50Performance benchmarks
- 48:01Future improvements
related talks
51mAn Overview of the Linux Kernel Crypto Subsystem
28mModernizing Kernel Cryptography: From Complex APIs To Streamlined Libraries
30mFacing Extinction: The Fight To Keep Hardware Crypto Engines in Embedded Linux
47mLinux Cryptographic Acceleration on an i.MX6
36mUnder Lock & Key: Using Hardware Protected Keys with the Linux Crypto API
06mQ&A
50mUsing OP-TEE as a Cryptography Engine
28mWhat If We Ask Linux to Do Cryptography for Us?