• Dmitry Kasatkin's avatar
    ima: use ahash API for file hash calculation · 3bcced39
    Dmitry Kasatkin authored
    Async hash API allows the use of HW acceleration for hash calculation.
    It may give significant performance gain and/or reduce power consumption,
    which might be very beneficial for battery powered devices.
    
    This patch introduces hash calculation using ahash API. ahash performance
    depends on the data size and the particular HW. Depending on the specific
    system, shash performance may be better.
    
    This patch defines 'ahash_minsize' module parameter, which is used to
    define the minimal file size to use with ahash.  If this minimum file size
    is not set or the file is smaller than defined by the parameter, shash will
    be used.
    
    Changes in v3:
    - kernel parameter replaced with module parameter
    - pr_crit replaced with pr_crit_ratelimited
    - more comment changes - Mimi
    
    Changes in v2:
    - ima_ahash_size became as ima_ahash
    - ahash pre-allocation moved out from __init code to be able to use
      ahash crypto modules. Ahash allocated once on the first use.
    - hash calculation falls back to shash if ahash allocation/calculation fails
    - complex initialization separated from variable declaration
    - improved comments
    Signed-off-by: default avatarDmitry Kasatkin <d.kasatkin@samsung.com>
    Signed-off-by: default avatarMimi Zohar <zohar@linux.vnet.ibm.com>
    3bcced39
kernel-parameters.txt 129 KB