Cover Letter Detail
Show a cover letter.
GET /api/1.0/covers/2175912/?format=api
{ "id": 2175912, "url": "http://patchwork.ozlabs.org/api/1.0/covers/2175912/?format=api", "project": { "id": 58, "url": "http://patchwork.ozlabs.org/api/1.0/projects/58/?format=api", "name": "swupdate development", "link_name": "swupdate", "list_id": "swupdate.googlegroups.com", "list_email": "swupdate@googlegroups.com", "web_url": "https://github.com/sbabic/swupdate", "scm_url": "git://github.com/sbabic/swupdate", "webscm_url": "" }, "msgid": "<20251219112215.103862-1-bage@debian.org>", "date": "2025-12-19T11:21:55", "name": "[0/5] pkcs11 decrypt provider based on p11-kit", "submitter": { "id": 84118, "url": "http://patchwork.ozlabs.org/api/1.0/people/84118/?format=api", "name": "Bastian Germann", "email": "bage@debian.org" }, "series": [ { "id": 485984, "url": "http://patchwork.ozlabs.org/api/1.0/series/485984/?format=api", "date": "2025-12-19T11:22:00", "name": "pkcs11 decrypt provider based on p11-kit", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/485984/mbox/" } ], "headers": { "Return-Path": "<swupdate+bncBCN5N5NJZ4BBB3PKSTFAMGQEWBFIOYA@googlegroups.com>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=googlegroups.com header.i=@googlegroups.com\n header.a=rsa-sha256 header.s=20230601 header.b=YFQUD0gS;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=googlegroups.com\n (client-ip=2a00:1450:4864:20::339; helo=mail-wm1-x339.google.com;\n envelope-from=swupdate+bncbcn5n5njz4bbb3pkstfamgqewbfioya@googlegroups.com;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from mail-wm1-x339.google.com (mail-wm1-x339.google.com\n [IPv6:2a00:1450:4864:20::339])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4dXlWC4tsWz1y2F\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 19 Dec 2025 22:22:31 +1100 (AEDT)", "by mail-wm1-x339.google.com with SMTP id\n 5b1f17b1804b1-477cf25ceccsf15801235e9.0\n for <incoming@patchwork.ozlabs.org>;\n Fri, 19 Dec 2025 03:22:31 -0800 (PST)", "by 2002:a05:600c:46c9:b0:477:a1df:48a5 with SMTP id\n 5b1f17b1804b1-47a8ec6526bls43214335e9.2.-pod-prod-07-eu; Fri, 19 Dec 2025\n 03:22:19 -0800 (PST)", "from stravinsky.debian.org (stravinsky.debian.org.\n [2001:41b8:202:deb::311:108])\n by gmr-mx.google.com with ESMTPS id\n ffacd0b85a97d-4324ea794desi30545f8f.6.2025.12.19.03.22.19\n for <swupdate@googlegroups.com>\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Fri, 19 Dec 2025 03:22:19 -0800 (PST)", "from authenticated user\n\tby stravinsky.debian.org with esmtpsa\n (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)\n\t(Exim 4.94.2)\n\t(envelope-from <bage@debian.org>)\n\tid 1vWYYs-003BXY-QM; Fri, 19 Dec 2025 11:22:18 +0000" ], "ARC-Seal": [ "i=2; a=rsa-sha256; t=1766143344; cv=pass;\n d=google.com; s=arc-20240605;\n b=Cpj8Jl+OUAa39u7LWwu4RbQCX1HYDvWAO3PfXI5KVHHhFxOl/9eD0Bmowi8ELzhjer\n CgcXauZeS8FsZ6oBHDEcNtm/4fvow8imIZWE5vIVP3TtpE3z8efJbQL0w/O3wGiR+mWW\n Z0kHTsxaXZ/f0XID6unH2WQlC29a7fUe1E9+ySDra4zXAWcBgE/PWU2l/nKEAN+xeLKK\n 25rVmGBdfZf7JlJiQvAADzwrt6XWna06A1okguEVJG4RaViIVyLdPxFYi3uyeWGN1WZN\n UKdBQyQHlGlfIamol/jy9ZopgJq3G/Xd0bnKkSamUyf5TVbTVDa+Ba6KyiEaFvo6NTBg\n DpZQ==", "i=1; a=rsa-sha256; t=1766143339; cv=none;\n d=google.com; s=arc-20240605;\n b=NwwUZBMm4RLSVb2iXtUcmbZKY9JyV0eP0E4okrRUZ+DUc+A+U3bcrsI3X2u9SaaLpE\n WplpXEsMbEgosqKgV4sBUne92MSG7132Ed77UeELURzVHxSCcPflVHb+kAtfjHgTQEGr\n YOpb5rU4/484DhKhXobPlGcjsJKHHqsCg0PUFvefXEozRUSm5CohO1GpX0C26N6UIEl+\n gQYy8LEJSRnrp42a0GTiS1DWVkbDZigwb8Dk3+7kMDwD/qGZNUaVru2KHisSXkFFsU5d\n zkyypsvX/EBxjxs/1xFqXYbtjAeHFFMfSrsXxQw4O0mH6JJpnO3EJzehgHR49FCUOfrj\n Pvfg==" ], "ARC-Message-Signature": [ "i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n :list-id:mailing-list:precedence:mime-version:message-id:date\n :subject:cc:to:from:sender:dkim-signature;\n bh=ESeZxPBygjAH5DEQK+ZW+y+OPoOZomB7eWt3u+yMw4E=;\n fh=l+mTJ5BPeKqHuqFjrT3Cgx4rrCuXhJtR96XwNfGDKVE=;\n b=F+PeEuODE1E4meAJqDo8nsUJEl1udSbwfiov4LsYA2GXfS4dz9tP9RqidZw9LkDzI5\n gC3F9N63+bz3kN3RbDTUceoJDxAUFX7vhpwtaOJN1w7vKDHCS/e5hLXzZCJd10BlR9Eu\n COuVCA5yb7LG90DO6m+qyq5ZRDoIsTfMEbWrIyKXLYA36b2lNkmqK2sTQFlzmRN6V+e1\n 4MqwsUG/nFPfpvWSLN3EtYuSbTfYyl8kJsRQXlccbe+QmGYOZSwsqx+5m/aLFDWorOxN\n a03odofs5e2DklkwbmJ7C70M5bZZJJ/lbm1BT4iaSc1Sm48BzSPiV9I+myPcGZ1q/0Xr\n uOLw==;\n darn=patchwork.ozlabs.org", "i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:dkim-signature;\n bh=yVGgLAa9objXDQGF5R8OlMdUgUVRl65cq+fqYptkdUs=;\n fh=uhIbdHOwgcqt5kz5/YMvH8NrIswTHi9fiDBkOU8HgOo=;\n b=VAcs5nhvEMTviaoOawGrcvYwqFyKcipYL9gIVd+Z4S1xyFZp0xSDBLigNiFyRI4s65\n Geeu24wLF4pxtpUREZ7RG1TFa5nqzjb5UqJrOPyi0Y3a14k80hKQQCtJSY3AmCKMNiue\n 5luk8GBmQo+sOtWIhNwl2/qYJwq4/Ie15P0tnbbDgS+J4xGW1q7Ae8YrJ4khklYnGfTn\n /HHPv/yztZ0fGo8DsOP00KacYwE1n2SUqNw15izh1jL7uP/EFAlOcSPNX5ozecHlkwAX\n 7QeP4zx27DFY3lb24T4ENcSlrBHev/6nB8rcYCPU0ePJSzyNYhDsNwAOE+olbFCN2ACF\n mwnw==;\n dara=google.com" ], "ARC-Authentication-Results": [ "i=2; gmr-mx.google.com;\n dkim=pass header.i=@debian.org header.s=smtpauto.stravinsky\n header.b=CTHiamrL;\n spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org", "i=1; gmr-mx.google.com;\n dkim=pass header.i=@debian.org header.s=smtpauto.stravinsky\n header.b=CTHiamrL;\n spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=googlegroups.com; s=20230601; t=1766143344; x=1766748144;\n darn=patchwork.ozlabs.org;\n h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n :list-id:mailing-list:precedence:x-original-authentication-results\n :x-original-sender:mime-version:message-id:date:subject:cc:to:from\n :sender:from:to:cc:subject:date:message-id:reply-to;\n bh=ESeZxPBygjAH5DEQK+ZW+y+OPoOZomB7eWt3u+yMw4E=;\n b=YFQUD0gSASk0O6EUQ3jT2i6bMVwC5sPmv3lF7Ro764DoMm9GKfPY8+0r3h1V3Ok3UZ\n IhU/Plfm4lLuCj/Endv20E8FImGlXQ1IhBr5LEQWUGNgJXDHaa7pk7pJeAzBTYaMW1IJ\n 5M+VJJNqjV+gaytI2RLVDdeqPlTX+edgUy/hvhSxyZwpLtE/vL9ZiI9WdqUKsnW9p/9p\n Mnf85Icy+8rVbkf/7jCUtmWPMmMO35aeXJUzNuCBXpwu4tfvWLoWZGmz/KLhb6IKBfcc\n MluH4vmHEb5d75mqHWkJvCERxlfY4mOodeo+OiDtLt9Lndu9oDvOJZnIJF8T7g+xb7YB\n 3P5g==", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1766143344; x=1766748144;\n h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n :x-spam-checked-in-group:list-id:mailing-list:precedence\n :x-original-authentication-results:x-original-sender:mime-version\n :message-id:date:subject:cc:to:from:x-beenthere:x-gm-message-state\n :sender:from:to:cc:subject:date:message-id:reply-to;\n bh=ESeZxPBygjAH5DEQK+ZW+y+OPoOZomB7eWt3u+yMw4E=;\n b=H1812uli5TnSLobxzRNIXjGoYFlULcuowaNplrurqTwb6DZvE+CXZdi3TiBwU9SOSA\n 7HUTsgUTCYLjOUcgDlCBJ3FX2xtpO/2xChOvk6AiDSI/UlsUjkPs8rKTLZLak9pzbaA0\n mj3kam3LewSVG7KpET/GO9jNVmtR+lrv3EkIKirim1JVca84fOJMRsMIh9eCBHd50PGj\n baisNWqNSJhKoI3WKkkL7fep9MMUvpoV9LJCcEfTcem3CTxSphsBCVr/ICJStNhwtMwm\n Jm16GrGc6rrTls59g4FiA4/A2xO/4HtMqkNAzuiWIwW6Cf0L8RrTVyznam/h2MSV4TX7\n ALBQ==", "Sender": "swupdate@googlegroups.com", "X-Forwarded-Encrypted": "i=2;\n AJvYcCU1HWxMMqLCNdwOvZMtLnmtgOlMIlAdmOCkddpLh0eWBwONGevxwOe7G1Kf/ib6nRAS5MZ3AR7GWA==@patchwork.ozlabs.org", "X-Gm-Message-State": "AOJu0YwRE3U2Qy0u/Z4C2uzGl7tjBoJIGDT0i1ThbifkYdYKYWJwZ8Ac\n\tKe+K2XMHW4TewmjGVLsIUEQJT9xHK9CDZCZPwbB6dKXpDViC/cO5fiF3", "X-Google-Smtp-Source": "\n AGHT+IGk9Q0Q/JA3RSAZj4bSarverCEtmqSO+Gwxn6H5qhA6j+5vzNes80+vFZpOMmcd+MuagIQLlA==", "X-Received": [ "by 2002:a05:600c:198b:b0:477:9fcf:3fe3 with SMTP id\n 5b1f17b1804b1-47d1df12f84mr10595865e9.0.1766143343851;\n Fri, 19 Dec 2025 03:22:23 -0800 (PST)", "by 2002:a05:600c:8b12:b0:477:a36f:1a57 with SMTP id\n 5b1f17b1804b1-47d1955ae38mr26431775e9.3.1766143339467;\n Fri, 19 Dec 2025 03:22:19 -0800 (PST)" ], "X-BeenThere": "swupdate@googlegroups.com;\n h=\"AWVwgWbOHHfdTGZcSunwcm20N9U2Ro7zop5oahudhrylybZo4g==\"", "Received-SPF": "none (google.com: bage@debian.org does not designate permitted\n sender hosts) client-ip=2001:41b8:202:deb::311:108;", "From": "Bastian Germann <bage@debian.org>", "To": "swupdate@googlegroups.com", "Cc": "Bastian Germann <bage@debian.org>,\n\tzachar.matej@gmail.com", "Subject": "[swupdate] [PATCH 0/5] pkcs11 decrypt provider based on p11-kit", "Date": "Fri, 19 Dec 2025 12:21:55 +0100", "Message-ID": "<20251219112215.103862-1-bage@debian.org>", "X-Mailer": "git-send-email 2.51.0", "MIME-Version": "1.0", "X-Debian-User": "bage", "X-Original-Sender": "bage@debian.org", "X-Original-Authentication-Results": "gmr-mx.google.com; dkim=pass\n header.i=@debian.org header.s=smtpauto.stravinsky header.b=CTHiamrL;\n spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org", "Content-Type": "text/plain; charset=\"UTF-8\"", "Precedence": "list", "Mailing-list": "list swupdate@googlegroups.com;\n contact swupdate+owners@googlegroups.com", "List-ID": "<swupdate.googlegroups.com>", "X-Spam-Checked-In-Group": "swupdate@googlegroups.com", "X-Google-Group-Id": "605343134186", "List-Post": "<https://groups.google.com/group/swupdate/post>,\n <mailto:swupdate@googlegroups.com>", "List-Help": "<https://groups.google.com/support/>,\n <mailto:swupdate+help@googlegroups.com>", "List-Archive": "<https://groups.google.com/group/swupdate", "List-Subscribe": "<https://groups.google.com/group/swupdate/subscribe>,\n <mailto:swupdate+subscribe@googlegroups.com>", "List-Unsubscribe": "\n <mailto:googlegroups-manage+605343134186+unsubscribe@googlegroups.com>,\n <https://groups.google.com/group/swupdate/subscribe>" }, "content": "Hi,\n\nBased on the year-old submission by Matej Zachar, I am posting a PKCS#11\ndecrypt provider that depends on p11-kit only and replaces the existing\none that depends on both wolfSSL and p11-kit.\n\nThe wolfSSL PKCS#11 provider is converted to be a file-based AES decrypt\nprovider which the wolfSSL crypto implementation was able to provide\nbefore the crypto providers were introduced.\n\nThis work of mine is not motivated by the subpar performance (as the\noriginal submission claims) but by the fact that SWUpdate can only link to\nold wolfSSL versions because of the recent GPL2 -> GPL3 license change.\nTherefore, I got rid of the Debian package's pkcs11 profile and would\nlike to reintroduce it.\n\nJust as a side note: I had to manually mangle the patch [0] available on\npatchwork, which is butchered. Is there any other place where people can\ndownload patches that were sent on the mailing list? This might be the\nreason for different whitespace from the original submission.\n\nCheers,\nBastian\n\n[0]: https://patchwork.ozlabs.org/project/swupdate/list/?series=428610\n\nBastian Germann (4):\n crypto: Add swupdate_pkcs11.h\n crypto: Make the p11-kit based module a decrypt provider\n crypto: Make WolfSSL decrypt provider non-PKCS#11\n test: Explicitly test pkcs11 crypto provider\n\nMatej Zachar (1):\n Increased PKCS#11 decryption performance with p11-kit\n\n Makefile.flags | 2 -\n crypto/Kconfig | 16 +-\n crypto/Makefile | 6 +-\n crypto/swupdate_decrypt_openssl.c | 5 +-\n crypto/swupdate_decrypt_pkcs11_p11kit.c | 305 ++++++++++++++++++++++++\n crypto/swupdate_decrypt_wolfssl.c | 211 +---------------\n crypto/swupdate_pkcs11.h | 22 ++\n crypto/swupdate_wolfssl.h | 20 +-\n test/Makefile | 32 ++-\n test/data/token/softhsm.conf | 2 +\n test/test_crypt_pkcs11.c | 99 ++++++++\n 11 files changed, 481 insertions(+), 239 deletions(-)\n create mode 100644 crypto/swupdate_decrypt_pkcs11_p11kit.c\n create mode 100644 crypto/swupdate_pkcs11.h\n create mode 100644 test/data/token/softhsm.conf\n create mode 100644 test/test_crypt_pkcs11.c" }