On Mon, Feb 11, 2008 at 01:46:18PM +0100, Mark Phalan wrote: > > On Fri, 2008-02-08 at 17:33 -0500, Kevin Coffman wrote: > > I finally have basic AES128 working in our kernel code and > > interoperating with OpenSolaris (snv_78). I'm now trying to test that > > I can handle the rrc (rotate count) correctly. (Implementing this is > > complicated by our buffering primitives in the kernel.) I'd also like > > to test using aes256 against OpenSolaris. > > > > So now for my questions: > > > > 1) Is there a way to turn on testing of the rrc stuff (have the > > OpenSolaris machine send me rotated data) in your kmech code without > > re-compiling? > > I'm not aware of any way. Others may have more here...
Same here although I'm not familiar with the rrc so I'd have to dig some. > > 2) Is it possible to enable aes256 in OpenSolaris? > > Yes. Currently the strong crypto is not delivered by default with > OpenSolaris but there is a plan to add it Real Soon Now (really). > > > If so, where > > should I look? (Will simply getting and installing the > > on-closed-bins.i386.tar.bz2 from here > > (http://dlc.sun.com/osol/on/downloads/current/) be enough? > > Yes that should be enough. To see if you've got aes256 try running > "cryptoadm list". Yeah, look at the Kernel software providers. > If you have problems here, its probably best to mail > security-discuss at opensolaris.org crypto-discuss at opensolaris.org may be better in regards to specifics about AES in OpenSolaris. -- Will Fiveash Sun Microsystems Inc. Austin, TX, USA (TZ=CST6CDT)
