CMAC moving to crypto

[Tom Talpey]

> -----Original Message-----
> From: linux-cifs-owner at vger.kernel.org [mailto:linux-cifs-
> owner at vger.kernel.org] On Behalf Of Steve French
> Sent: Thursday, April 18, 2013 10:24 AM
> To: Shirish Pargaonkar; linux-cifs at vger.kernel.org; samba-technical
> Subject: CMAC moving to crypto
> 
> I see that cmac.c is now in Linux crypto directory, presumably destined for
> 3.11 kernel.  Presumably would allow hardware acceleration for new
> processors which support it in internally ?!
> 
> Has anyone looked at whether and how we could use this (in either kernel or
> samba)

As I'm sure you know, the SMB3 dialect uses AES-CMAC-128 for message signing, so access to the native support of newer processors would benefit Linux SMB3 peers greatly, as it does currently on Windows. Good to see.

Is AES CCM encryption also supported or planned? Because CCM provides integrity, CMAC signing is bypassed for SMB3 encrypted messages.

Tom.


> 
> See:
> http://git.kernel.org/cgit/linux/kernel/git/next/linux-
> next.git/log/crypto/cmac.c
> 
> --
> Thanks,
> 
> Steve
> --
> To unsubscribe from this list: send the line "unsubscribe linux-cifs" in the
> body of a message to majordomo at vger.kernel.org More majordomo info at
> http://vger.kernel.org/majordomo-info.html