OpenSSL with Linux kernel crypto API

[Hareesh Das Ulleri]

Dear OpenSSL users,

  I have few questions regarding OpenSSL 3.0.7 and Linux 5.10.

  Does OpenSSL 3.0.7 support the use of linux Cryptodev or AF_ALGO. Or does it need any separate build configurations to work with Linux kernel crypto API interface (Is there any man page for this) ? My understanding is that, as a default OpenSSL uses its own user-space crypto implementations (in libcrypto) without calling linux kernel for its crypto operations, please clarify.

  In my application, I am using an HSM for cryption. Application calls OpenSSL custom provider and it calls the HSM kernel driver. These are not implemented according to Linux kernel Crypto API interface. Does OpenSSL recommend to use Kernel Crypto API interface driver to interact with HSM cryption kernel module? (later I want to use OpenSSH with OpenSSL for secure communication / file transfer).

Thanks,
Hareesh

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20230113/9cd75488/attachment.htm>