CRCONF(8)

NAME
crconf - Linux cryptoapi configuration tool

SYNOPSIS
crconf COMMAND OBJECT COMMAND := { add | del | update | show } OBJECT := { alg | driver | all } crconf { add | del | update } driver "DRIVER" { type "TYPE" | priority "PRIORITY" } crconf { add | del } alg "ALG" type "TYPE" crconf show { all | driver "DRIVER" }

DESCRIPTION
crconf is a small commandline tool to configure the Linux crypto layer. Basically it is used change the system default configuration of the crypto layer in the Linux kernel.

ALGORITHMS AND ALGORITHM DRIVERS
The crypto algorithms or algorithm drivers are specified by the string that identifies the algorithm or the driver in the kernel. E.g. an algorithm would be "sha1". A driver is a certain implementation of an algorithm e.g. "sha1-generic" for the generic C implementation of sha1.

ALGORITHM TYPE
The algorithm types are defined in the linux kernel in include/linux/crypto.h. The parameter for the type argument is one of the following numbers (linux-3.3): CRYPTO_ALG_TYPE_CIPHER 1
CRYPTO_ALG_TYPE_COMPRESS 2
CRYPTO_ALG_TYPE_AEAD 3
CRYPTO_ALG_TYPE_BLKCIPHER 4
CRYPTO_ALG_TYPE_ABLKCIPHER 5
CRYPTO_ALG_TYPE_GIVCIPHER 6
CRYPTO_ALG_TYPE_DIGEST 8
CRYPTO_ALG_TYPE_HASH 8
CRYPTO_ALG_TYPE_SHASH 9
CRYPTO_ALG_TYPE_AHASH 10
CRYPTO_ALG_TYPE_RNG 12
CRYPTO_ALG_TYPE_PCOMPRESS 15

ALGORITHM DRIVER PRIORITY
The priority of an algorithm driver determines which driver will be used if there are more than one algorithm drivers present for the same algorithm. The parameter of the priority argument is an unsigned integer. The driver with the highest priority is used.

COMMANDS

add Add an instance of a crypto algorithm or driver.

del Delete an instance of a crypto algorithm or driver.

update
    Update an instance of a crypto algorithm driver.

show
    Show all instantiated crypto algorithms (drivers) or a certain algorithm driver.

OBJECTS

alg Configure a crypto algorithm. Valid commands are add and del.

driver
    Configure a crypto algorithm driver. Valid commands are add, del update, and show.

all Only valid for the show command.

AUTHOR
Steffen Klassert <steffen.klassert@secunet.com>