The Marvell CESA needs some software assistance in doing HMAC - the inner and outer blocks need to be prepared and hashed (partial hash). The hash results are fed into the hardware and the hardware uses it as IVs and does the two hash operations. So in effect the HW hmac(sha1) driver needs software sha1 driver.
Note, however, that the above calculation is not per-request, it is per setkey operation. The IVs are stored in the tfm. I hope that clears things with respect to the mv_cesa driver. On 4/13/2010 1:15 PM, Dmitry Kasatkin wrote: > Btw. > > But anyway hmac does not support ahash now. right? > So the only way currently is to add to the driver. > > > On 13/04/10 13:03, ext Herbert Xu wrote: >> On Tue, Apr 13, 2010 at 12:39:55PM +0300, Dmitry Kasatkin wrote: >> >>> btw. patch to mv_cesa is actually adding hmac to the driver. >>> How would you comment that? >>> >> AFAICS it's doing HMAC in hardware. Uri, is that not the case? >> >> >>> The same way could be also used here. >>> >> If your hardware supports HMAC that would definitely be the way >> to go. >> >> Cheers, >> -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
