Crypto API

Author:

Stephan Mueller

Author:

Marek Vasut

This documentation outlines the Linux kernel crypto API with its concepts, details about developing cipher implementations, employment of the API for cryptographic use cases, as well as programming examples.

Table of contents

• Kernel Crypto API Interface Specification
  • Introduction
  • Terminology
• Scatterlist Cryptographic API
  • Introduction
  • Details
  • Developer Notes
  • Adding New Algorithms
  • Bugs
  • Further Information
  • Authors
  • Credits
• Kernel Crypto API Architecture
  • Cipher algorithm types
  • Ciphers And Templates
  • Synchronous And Asynchronous Operation
  • Crypto API Cipher References And Priority
  • Key Sizes
  • Cipher Allocation Type And Masks
  • Internal Structure of Kernel Crypto API
• Asynchronous Transfers/Transforms API
  • 1. Introduction
  • 2.Genealogy
  • 3. Usage
  • 4. Driver Development Notes
• Asymmetric / Public-key Cryptography Key Type
  • Overview
  • Key Identification
  • Accessing Asymmetric Keys
  • Asymmetric Key Subtypes
  • Instantiation Data Parsers
  • Keyring Link Restrictions
• Developing Cipher Algorithms
  • Registering And Unregistering Transformation
  • Single-Block Symmetric Ciphers [CIPHER]
  • Multi-Block Ciphers
  • Hashing [HASH]
• User Space Interface
  • Introduction
  • User Space API General Remarks
  • In-place Cipher operation
  • Message Digest API
  • Symmetric Cipher API
  • AEAD Cipher API
  • Random Number Generator API
  • Zero-Copy Interface
  • Setsockopt Interface
  • User space API example
• Crypto Engine
  • Overview
  • Requirement
  • Order of operations
• Programming Interface
  • Symmetric Key Cipher
  • Authenticated Encryption With Associated Data (AEAD)
  • Message Digest
  • Random Number Generator (RNG)
  • Asymmetric Cipher
  • Asymmetric Signature
  • Key-agreement Protocol Primitives (KPP)
• Code Examples
  • Code Example For Symmetric Key Cipher Operation
  • Code Example For Use of Operational State Memory With SHASH
  • Code Example For Random Number Generator Usage
• Fast & Portable DES encryption & decryption
  • motivation and history
  • porting notes
  • OPTIONAL performance optimizations
  • coding notes
  • special efficient data format
  • Getting it to compile on your machine
  • Speeding up kerberos (and/or its des library)
  • Other uses
• Hardware Device Driver Specific Documentation
  • octeontx2 devlink support
• Kerberos V Cryptography API
  • Overview
  • Encoding Type
  • Key Derivation
  • Crypto Functions
  • The krb5enc AEAD algorithm