An Overview of the Linux Kernel Crypto Subsystem
summary
Covers the Linux kernel crypto internals, how to register algorithms (crypto_register, algorithm names, priorities — hardware ~300), and how to implement setkey/encrypt/decrypt and per-instance context sizing; compares user-space interfaces cryptodev vs AF_ALG with microbenchmarks (AES-CBC 8 KB shows crypto dev faster but many pure-software builds still beat kernel engines), reports needing 228 threads to saturate the engine, measures about 60% CPU when offloaded versus 100% for software, and describes work on a Marvell CESA engine plus missing load‑balancing and softirq quirks.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:17Cryptography? What is this?
- 12:41Using the crypto framework
- 16:42Dummy user implementation
- 37:16Load balancing random thoughts
related talks
51mThe Linux Crypto API
28mModernizing Kernel Cryptography: From Complex APIs To Streamlined Libraries
30mFacing Extinction: The Fight To Keep Hardware Crypto Engines in Embedded Linux
47mLinux Cryptographic Acceleration on an i.MX6
34mAuthenticated and Encrypted Storage on Embedded Linux
36mUnder Lock & Key: Using Hardware Protected Keys with the Linux Crypto API
28mOverview of the Linux Kernel Security Subsystem
27mSpeeding Up Linux Disk Encryption