Re: [GSoC] project proposal

2015-04-23 Thread Stefan Hajnoczi
On Wed, Apr 22, 2015 at 9:51 AM, Catalin Vasile catalinvasil...@gmail.com wrote: On Wed, Apr 22, 2015 at 11:20 AM, Stefan Hajnoczi stefa...@gmail.com wrote: On Tue, Apr 21, 2015 at 04:07:56PM +0200, Paolo Bonzini wrote: On 21/04/2015 16:07, Catalin Vasile wrote: I don't get the part with

Re: [GSoC] project proposal

2015-04-22 Thread Paolo Bonzini
On 22/04/2015 10:51, Catalin Vasile wrote: If we want a mainstream userspace backend that could interact with a lot of crypto engines, we could use OpenSSL (it can actually use cryptodev and AF_ALG as engines). For now, until mid June (my diploma project presentation) I still want to use

Re: [GSoC] project proposal

2015-04-22 Thread Catalin Vasile
I found my way through it's API. http://www.gnutls.org/manual/gnutls.html#Cryptographic-API Does anyone know if it has one shot givencrypt (generate IV and encrypt as one job)? I see an option to get random data, but I was thinking if there is an one shot option. On Wed, Apr 22, 2015 at 4:43 PM,

Re: [GSoC] project proposal

2015-04-22 Thread Stefan Hajnoczi
On Tue, Apr 21, 2015 at 04:07:56PM +0200, Paolo Bonzini wrote: On 21/04/2015 16:07, Catalin Vasile wrote: I don't get the part with getting cryptodev upstream. I don't know what getting cryptodev upstream actually implies. From what I know cryptodev is done (is a functional project) that

Re: [GSoC] project proposal

2015-04-22 Thread Stefan Hajnoczi
On Tue, Apr 21, 2015 at 05:24:55PM +0300, Catalin Vasile wrote: Can you give me more details on GnuTLS? I'm going through some documentation and code and I see that it doesn't actually have separate encryption and authentication primitives. gnutls is a natural choice because QEMU already uses

Re: [GSoC] project proposal

2015-04-22 Thread Catalin Vasile
On Wed, Apr 22, 2015 at 11:20 AM, Stefan Hajnoczi stefa...@gmail.com wrote: On Tue, Apr 21, 2015 at 04:07:56PM +0200, Paolo Bonzini wrote: On 21/04/2015 16:07, Catalin Vasile wrote: I don't get the part with getting cryptodev upstream. I don't know what getting cryptodev upstream actually

Re: [GSoC] project proposal

2015-04-22 Thread Catalin Vasile
In those examples algorithms are used with standard protocols, not with standalone algorithms. CryptoAPI itself offers basic primitives such as encryption and authentication which can be combined however you like. Some combinations care result in other protocol implementations as well. On Wed,

Re: [GSoC] project proposal

2015-04-21 Thread Catalin Vasile
I don't get the part with getting cryptodev upstream. I don't know what getting cryptodev upstream actually implies. From what I know cryptodev is done (is a functional project) that was rejected in the Linux Kernel and there isn't actually way to get it upstream. On Tue, Mar 31, 2015 at 8:14 PM,

Re: [GSoC] project proposal

2015-04-21 Thread Catalin Vasile
Can you give me more details on GnuTLS? I'm going through some documentation and code and I see that it doesn't actually have separate encryption and authentication primitives. P.S. I have excluded Kim Philiphs from this mail because the mailing list doesn't allow me to send e-mails to users not

Re: [GSoC] project proposal

2015-04-21 Thread Catalin Vasile
I don't get the part with getting cryptodev upstream. I don't know what getting cryptodev upstream actually implies. From what I know cryptodev is done (is a functional project) that was rejected in the Linux Kernel and there isn't actually way to get it upstream. On Tue, Mar 31, 2015 at 8:14 PM,

Re: [GSoC] project proposal

2015-04-21 Thread Paolo Bonzini
On 21/04/2015 16:07, Catalin Vasile wrote: I don't get the part with getting cryptodev upstream. I don't know what getting cryptodev upstream actually implies. From what I know cryptodev is done (is a functional project) that was rejected in the Linux Kernel and there isn't actually way to

Re: [GSoC] project proposal

2015-03-31 Thread Stefan Hajnoczi
On Wed, Mar 18, 2015 at 8:59 PM, Paolo Bonzini pbonz...@redhat.com wrote: On 18/03/2015 18:05, Catalin Vasile wrote: cryptodev is not merged into upstream from what I know. Yes, but QEMU runs on non-Linux platforms too. Of course doing vhost+driver or gnutls+driver would be already more than

Re: [GSoC] project proposal

2015-03-19 Thread Paolo Bonzini
On 19/03/2015 19:38, Catalin Vasile wrote: I have submitted my application on the official GSoC site. Do I also have to submit it on this discussion list or anywhere else? No, I can see the application. Thanks! Paolo -- To unsubscribe from this list: send the line unsubscribe kvm in the

Re: [GSoC] project proposal

2015-03-19 Thread Catalin Vasile
I have submitted my application on the official GSoC site. Do I also have to submit it on this discussion list or anywhere else? On Wed, Mar 18, 2015 at 10:59 PM, Paolo Bonzini pbonz...@redhat.com wrote: On 18/03/2015 18:05, Catalin Vasile wrote: cryptodev is not merged into upstream from

[GSoC] project proposal

2015-03-18 Thread Catalin Vasile
Hi, My name is Catalin Vasile and I want to participate with a project for qemu at GSoC. From what I understand from the rules, I can participate with things I could also use for my college projects. This is my last bachelor year and I'm doing my diploma project, which is related to

Re: [GSoC] project proposal

2015-03-18 Thread Paolo Bonzini
On 18/03/2015 17:01, Catalin Vasile wrote: To be more exact, I want to make a virtio-crypto device to emulate a virtual cryptographic offloading device that will send jobs from the guest to a vhost that will process the jobs. This mechanism will link CryptoAPI from the guest to the CryptoAPI

Re: [GSoC] project proposal

2015-03-18 Thread Catalin Vasile
cryptodev is not merged into upstream from what I know. gnutls can use cryptodev and AF_ALG as crypto engines. From some benchmarks (that can also be found on cryptodev's webpage) you can see AF_ALG has a lot overhead over a standalone misc/char device. On Wed, Mar 18, 2015 at 6:42 PM, Paolo

Re: [GSoC] project proposal

2015-03-18 Thread Paolo Bonzini
On 18/03/2015 18:05, Catalin Vasile wrote: cryptodev is not merged into upstream from what I know. Yes, but QEMU runs on non-Linux platforms too. Of course doing vhost+driver or gnutls+driver would be already more than enough for the summer. In any case, just put all the justification in