Re: [PATCH] Use kzfree in crypto API context initialization and key/iv handling [LWN.net]

From:		Herbert Xu <herbert-AT-gondor.apana.org.au>
To:		David Miller <davem-AT-davemloft.net>
Subject:		Re: [PATCH] Use kzfree in crypto API context initialization and key/iv handling
Date:		Mon, 1 Jun 2009 14:48:37 +1000
Message-ID:		<20090601044837.GA9220@gondor.apana.org.au>
Cc:		riel-AT-redhat.com, research-AT-subreption.com, linux-kernel-AT-vger.kernel.org, pageexec-AT-freemail.hu, linux-mm-AT-kvack.org, torvalds-AT-osdl.org, alan-AT-lxorguk.ukuu.org.uk, linux-crypto-AT-vger.kernel.org
Archive-link:		Article, Thread

On Sun, May 31, 2009 at 09:46:23PM -0700, David Miller wrote:
> 
> I don't even want to think about what this does to IPSEC rule creation
> rates, that that matters heavily for cell phone networks where
> hundreds of thousands of nodes come in and out of the server and each
> such entry requires creating 4 IPSEC rules.

I completely agree.  The zeroing of metadata is gratuitous.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org.  For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>

(Log in to post comments)