From 3bacac9dca9a643d06e6fbba01f9865a120dd031 Mon Sep 17 00:00:00 2001 From: deraadt <> Date: Tue, 10 Jun 2014 16:15:19 +0000 Subject: [PATCH] Abandon the auto-ENGINE /dev/crypto interface. VIA 3des cbc receives collateral damage. The syncronous nature of this mechanism has hampered performance for symmetric crypto relative to brute-force cpu. The assymetric crypto support never really materialized in drivers. So abandon the complexity. ok tedu beck mikeb some disagrement from djm but if he wants to test /dev/crypto ciphers he should do it without this this gigantic API in the way --- src/lib/libcrypto/crypto/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/lib/libcrypto/crypto/Makefile b/src/lib/libcrypto/crypto/Makefile index 1e2ce774..e71912dd 100644 --- a/src/lib/libcrypto/crypto/Makefile +++ b/src/lib/libcrypto/crypto/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.38 2014/06/02 15:08:38 deraadt Exp $ +# $OpenBSD: Makefile,v 1.39 2014/06/10 16:15:19 deraadt Exp $ LIB= crypto @@ -132,7 +132,7 @@ SRCS+= eng_err.c eng_lib.c eng_list.c eng_init.c eng_ctrl.c SRCS+= eng_table.c eng_pkey.c eng_fat.c eng_all.c SRCS+= tb_rsa.c tb_dsa.c tb_ecdsa.c tb_dh.c tb_ecdh.c tb_rand.c tb_store.c SRCS+= tb_cipher.c tb_digest.c tb_pkmeth.c tb_asnmth.c -SRCS+= eng_openssl.c eng_cnf.c eng_dyn.c hw_cryptodev.c +SRCS+= eng_openssl.c eng_cnf.c eng_dyn.c SRCS+= eng_rsax.c # XXX unnecessary? handled in EVP now... # SRCS+= eng_aesni.c # local addition