[net-next,0/2] xfrm: Add support for SM3 and SM4

Message

Xu Jia Dec. 22, 2021, 9:06 a.m. UTC

These patches add xfrm support for SM3 and SM4 algorithms which are
cryptographic standards published by China State Cryptography 
Administration.

SM3 secure hash (OSCCA GM/T 0004-2012 SM3) is based on Merkle-Damgard 
with a thuncation of 256 bits. It could be used for authentication 
and random number generation.

SM4 symmetric ciper algorithm (OSCCA GB/T 32097-2016) has at least 128
bits packet length which is similar to AES ciper algorithm. It is 
suitable for the use of block ciphers in cryptographic applications.

As SM3 and SM4 have already been supported by Linux kernel,
after these patches, we can use them with "ip xfrm" tools easily.


Xu Jia (2):
  xfrm: Add support for SM3 secure hash
  xfrm: Add support for SM4 symmetric cipher algorithm

 include/uapi/linux/pfkeyv2.h |  2 ++
 net/xfrm/xfrm_algo.c         | 41 +++++++++++++++++++++++++++++++++++++++++
 2 files changed, 43 insertions(+)

Comments

Steffen Klassert Dec. 29, 2021, 10:18 a.m. UTC | #1

On Wed, Dec 22, 2021 at 05:06:57PM +0800, Xu Jia wrote:
> These patches add xfrm support for SM3 and SM4 algorithms which are
> cryptographic standards published by China State Cryptography 
> Administration.
> 
> SM3 secure hash (OSCCA GM/T 0004-2012 SM3) is based on Merkle-Damgard 
> with a thuncation of 256 bits. It could be used for authentication 
> and random number generation.
> 
> SM4 symmetric ciper algorithm (OSCCA GB/T 32097-2016) has at least 128
> bits packet length which is similar to AES ciper algorithm. It is 
> suitable for the use of block ciphers in cryptographic applications.
> 
> As SM3 and SM4 have already been supported by Linux kernel,
> after these patches, we can use them with "ip xfrm" tools easily.
> 
> 
> Xu Jia (2):
>   xfrm: Add support for SM3 secure hash
>   xfrm: Add support for SM4 symmetric cipher algorithm
> 
>  include/uapi/linux/pfkeyv2.h |  2 ++
>  net/xfrm/xfrm_algo.c         | 41 +++++++++++++++++++++++++++++++++++++++++
>  2 files changed, 43 insertions(+)

Series applied to ipsec-next, thanks a lot!