Linux Kernel Crypto API User Space Interface Library

Edit Package libkcapi

libkcapi allows user-space to access the Linux kernel crypto API.

libkcapi uses this Netlink interface and exports easy to use APIs so that a developer does not need to consider the low-level Netlink interface handling.

The library does not implement any cipher algorithms. All consumer requests are sent to the kernel for processing. Results from the kernel crypto API are returned to the consumer via the library API.

The kernel interface and therefore this library can be used by unprivileged processes.

The focus during the development of this library is put on speed. This library does not perform any memcpy for processing the cryptographic data! The library uses scatter / gather lists to eliminate the need for moving data around in memory.

Refresh
Refresh
Source Files
Filename Size Changed
libkcapi-1.4.0.tar.xz 0000333040 325 KB
libkcapi-1.4.0.tar.xz.asc 0000000488 488 Bytes
libkcapi.changes 0000013255 12.9 KB
libkcapi.keyring 0000003541 3.46 KB
libkcapi.spec 0000006946 6.78 KB
Revision 8 (latest revision is 9)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 972887 from Marcus Meissner's avatar Marcus Meissner (msmeissn) (revision 8)
please stage with a link of GNUTLS to see if it works now



- Update to version 1.4.0
  * fix: ensure that LTO is supported (by Simo Sorce)
  * fix: add LTO regression testing (by Ondrej Mosnacek)
  * enhancement: add sm3sum, sm3hmac tools, add APIs kcapi_md_sm3, kcapi_md_hmac_sm3
  * enhancement: add SM4 convenience functions
  * fix: support AEAD encryption of arbitrary size with kcapi-enc
- removed libkcapi-fix-lto.patch (upstream)

- use https url

- Update to version 1.3.1
  * fix: fix -Wconversion warnings (by Ondrej Mosnacek)
  * fix: fix bad data types in _kcapi_common_send_meta (by Ondrej Mosnacek)
  * fix: Version symbols to maintain ABI compatibility (by Simo Sorce)
  * fix: disable io_getevents on systems that do not support it (by Khem Raj)
  * fix: remove prctl PR_SET_DUMPABLE to allow library to be debugged - as the
    library does not store any sensitive data in data structures it owns, such
    security precautions may not be necessary considering the benefit of
    allowing regular debugging
  * fix: ensure that sendmsg is always used as fallback when vmsplice cannot be
    used
  * enhancement: add kcapi_set_maxsplicesize and kcapi_get_maxsplicesize
  * enhancement: the variable types are changed from int32_t to ssize_t and
    from uint32_t to size_t to match common POSIX and Linux APIs
- Added libkcapi-fix-lto.patch
Comments 0
openSUSE Build Service is sponsored by