> -----Original Message----- > From: Dave Watson [mailto:davejwat...@fb.com] > Sent: Wednesday, January 31, 2018 8:52 PM > To: Vakul Garg <vakul.g...@nxp.com> > Cc: linux-cry...@vger.kernel.org; il...@mellanox.com; > avia...@mellanox.com; da...@davemloft.net; netdev@vger.kernel.org; > Gilad Ben-Yossef <gi...@benyossef.com> > Subject: Re: [PATCHv2] tls: Add support for encryption using async offload > accelerator > > On 01/31/18 09:34 PM, Vakul Garg wrote: > > Async crypto accelerators (e.g. drivers/crypto/caam) support > > offloading GCM operation. If they are enabled, crypto_aead_encrypt() > > return error code -EINPROGRESS. In this case tls_do_encryption() needs > > to wait on a completion till the time the response for crypto offload > > request is received. > > Comments from V1 > > On Wed, Jan 31, 2018 at 8:10 AM, Gilad Ben-Yossef > <gi...@benyossef.com> wrote: > >> Hi Vakul, > >> > >> On Wed, Jan 31, 2018 at 12:36 PM, Vakul Garg <vakul.g...@nxp.com> > wrote: > >>> Async crypto accelerators (e.g. drivers/crypto/caam) support > >>> offloading GCM operation. If they are enabled, crypto_aead_encrypt() > >>> return error code -EINPROGRESS. In this case tls_do_encryption() > >>> needs to wait on a completion till the time the response for crypto > >>> offload request is received. > >>> > >> > >> Thank you for this patch. I think it is actually a bug fix and should > >> probably go into stable > > > > On second though in stable we should probably just disable async tfm > > allocations. > > It's simpler. But this approach is still good for -next > > > > > > Gilad > > I agree with Gilad, just disable async for now. >
How to do it? Can you help with the api name? > If the flag MSG_DONTWAIT is set, we should be returning -EINPROGRESS and > not wait for a response. I had started working on a patch for that, but it's > pretty tricky to get right. Can you point me to your WIP code branch for this? If MSG_DONTWAIT is not used, will it be sane if enqueue the crypto request to accelerator and return to user space back so that user space can send more plaintext data while crypto accelerator is working in parallel?
