Linux Kernel Crypto API User Space Interface Library
libkcapi allows user-space to access the Linux kernel crypto API.
libkcapi uses this Netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level Netlink interface handling.
The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API.
The kernel interface and therefore this library can be used by unprivileged processes.
The focus during the development of this library is put on speed. This library does not perform any memcpy for processing the cryptographic data! The library uses scatter / gather lists to eliminate the need for moving data around in memory.
- Developed at security
- Sources inherited from project openSUSE:Factory
-
4
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Backports:SLE-15-SP4:SLECandidates/libkcapi && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| libkcapi-1.1.5.tar.xz | 0000320016 313 KB | |
| libkcapi-1.1.5.tar.xz.asc | 0000000488 488 Bytes | |
| libkcapi.changes | 0000009818 9.59 KB | |
| libkcapi.keyring | 0000003541 3.46 KB | |
| libkcapi.spec | 0000006941 6.78 KB |
Revision 6 (latest revision is 9)
Dominique Leuenberger (dimstar_suse)
accepted
request 788020
from
Marcus Meissner (msmeissn)
(revision 6)
- updated to 1.1.5: - Fix invocation of ansi_cprng in FIPS mode during testing - Fix testing on kernels >= 5.0 - Add virtualization test for kernel 5.1 - Fix the limit between vmsplice() and sendmsg() by Christophe Leroy - Fix remove code duplication by Ondrej MosnáÄek - Fix potential memleak in speed-test - updated to 1.1.4: - Fix: use sendmsg when processing more than 1<<16 bytes input data which improves performance on some architectures - updated to 1.1.3: - Fix: default location of FIPS 140-2 HMAC control file is .<orig file>.hmac (was accidentally moved to <orig file>.hmac with 1.1.0) - updated to 1.1.2: - Fix: Bug fixes for GCC 8.1.0 regarding string length checks by Krzysztof Kozlowski - Enhancement: ensure that tests execute on architectures other than X86 by Ondrej MosnáÄek - Fix: Bug fix to initialize FDs at the correct time in kcapi-kernel-if.c by Ondrej MosnáÄek - Test fix: Support test execution outside build environment by Ondrej MosnáÄek - updated to 1.1.1: - Fix: Bug fixes for kcapi_hasher by Ondrej MosnáÄek - updated to 1.1.0: - API Enhancement: Addition of kcapi_handle_reinit - Fix: simplify code by removing the internal *_fd functions from kcapi-kernel-if.c - Test enhancement: add IIV speed testing - Fix: add a loop around the read system call to always obtain all generated data - Fix: use host compiler for compiling docproc (reported by Christophe LEROY, fixed by Björn Esser) - Fix: make error handling of hashing applications consistent with coreutils applications (reported by Christophe LEROY) - Fix: support for zero length files (patched by Ondrej MosnáÄek) - Fix: support for zero message hashes on kernels <= 4.9 (patched by Ondrej MosnáÄek) - Fix: Add Travis CI test system provided by Ondrej MosnáÄek - Fix: Add several fixes to kcapi-hasher by Ondrej MosnáÄek - Fix: Add additional tests for kcapi-hasher by Ondrej MosnáÄek
Comments 0