[PATCH v2 1/2] cryptodev: fix RSA xform for ASN.1 syntax

Kusztal, ArkadiuszX arkadiuszx.kusztal at intel.com
Mon Oct 7 09:32:06 CEST 2024



> -----Original Message-----
> From: Kusztal, ArkadiuszX <arkadiuszx.kusztal at intel.com>
> Sent: Monday, October 7, 2024 9:20 AM
> To: Gowrishankar Muthukrishnan <gmuthukrishn at marvell.com>;
> dev at dpdk.org; Akhil Goyal <gakhil at marvell.com>; Fan Zhang
> <fanzhang.oss at gmail.com>
> Cc: Anoob Joseph <anoobj at marvell.com>; Richardson, Bruce
> <bruce.richardson at intel.com>; jerinj at marvell.com; Ji, Kai <kai.ji at intel.com>;
> jack.bond-preston at foss.arm.com; Marchand, David
> <david.marchand at redhat.com>; hemant.agrawal at nxp.com; De Lara Guarch,
> Pablo <pablo.de.lara.guarch at intel.com>; Trahe, Fiona
> <fiona.trahe at intel.com>; Doherty, Declan <declan.doherty at intel.com>;
> matan at nvidia.com; ruifeng.wang at arm.com; Gujjar, Abhinandan S
> <abhinandan.gujjar at intel.com>; maxime.coquelin at redhat.com;
> chenbox at nvidia.com; sunilprakashrao.uttarwar at amd.com;
> andrew.boyer at amd.com; ajit.khaparde at broadcom.com;
> raveendra.padasalagi at broadcom.com; vikas.gupta at broadcom.com;
> zhangfei.gao at linaro.org; g.singh at nxp.com; jianjay.zhou at huawei.com; Daly,
> Lee <lee.daly at intel.com>; Dooley, Brian <brian.dooley at intel.com>
> Subject: RE: [PATCH v2 1/2] cryptodev: fix RSA xform for ASN.1 syntax
> 
> Acked with a small comment.
> 
> > -----Original Message-----
> > From: Gowrishankar Muthukrishnan <gmuthukrishn at marvell.com>
> > Sent: Friday, October 4, 2024 8:11 AM
> > To: dev at dpdk.org; Akhil Goyal <gakhil at marvell.com>; Fan Zhang
> > <fanzhang.oss at gmail.com>
> > Cc: Anoob Joseph <anoobj at marvell.com>; Richardson, Bruce
> > <bruce.richardson at intel.com>; jerinj at marvell.com; Kusztal, ArkadiuszX
> > <arkadiuszx.kusztal at intel.com>; Ji, Kai <kai.ji at intel.com>; jack.bond-
> > preston at foss.arm.com; Marchand, David <david.marchand at redhat.com>;
> > hemant.agrawal at nxp.com; De Lara Guarch, Pablo
> > <pablo.de.lara.guarch at intel.com>; Trahe, Fiona
> > <fiona.trahe at intel.com>; Doherty, Declan <declan.doherty at intel.com>;
> > matan at nvidia.com; ruifeng.wang at arm.com; Gujjar, Abhinandan S
> > <abhinandan.gujjar at intel.com>; maxime.coquelin at redhat.com;
> > chenbox at nvidia.com; sunilprakashrao.uttarwar at amd.com;
> > andrew.boyer at amd.com; ajit.khaparde at broadcom.com;
> > raveendra.padasalagi at broadcom.com;
> > vikas.gupta at broadcom.com; zhangfei.gao at linaro.org; g.singh at nxp.com;
> > jianjay.zhou at huawei.com; Daly, Lee <lee.daly at intel.com>; Dooley, Brian
> > <brian.dooley at intel.com>; Gowrishankar Muthukrishnan
> > <gmuthukrishn at marvell.com>
> > Subject: [PATCH v2 1/2] cryptodev: fix RSA xform for ASN.1 syntax
Additionally, it should not be a fix.
The RFC mandates usage of the ASN.1, but only in case sharing private key across the network.
How the Cryptodev should interpret it, is up to the implementation.
> >
> > As per ASN.1 syntax (RFC 3447 Appendix A.1.2), RSA private key would
> > need
> It could be RFC 8017 instead.
> > specification of quintuple along with private exponent.
> > It is up to the implementation to internally handle, but not at RTE
> > itself to make them exclusive each other. Removing union on them
> > allows asymmetric implementation in VirtIO to benefit from the xform as per
> ASN.1 syntax.
> >
> > Signed-off-by: Gowrishankar Muthukrishnan <gmuthukrishn at marvell.com>
> > ---
> >  lib/cryptodev/rte_crypto_asym.h | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/lib/cryptodev/rte_crypto_asym.h
> > b/lib/cryptodev/rte_crypto_asym.h index 39d3da3952..c33be3b155 100644
> > --- a/lib/cryptodev/rte_crypto_asym.h
> > +++ b/lib/cryptodev/rte_crypto_asym.h
> > @@ -306,7 +306,7 @@ struct rte_crypto_rsa_xform {
> >
> >  	enum rte_crypto_rsa_priv_key_type key_type;
> >
> > -	union {
> > +	struct {
> >  		rte_crypto_uint d;
> >  		/**< the RSA private exponent */
> >  		struct rte_crypto_rsa_priv_key_qt qt;
> > --
> > 2.21.0
> 
> Acked-by: Arkadiusz Kusztal <arkadiuszx.kusztal at intel.com>


More information about the dev mailing list