Re: [PATCH v2 00/15] virtio-crypto: introduce framework and device emulation

[Paolo Bonzini <pbonzini@redhat.com>]

On 13/09/2016 11:54, Daniel P. Berrange wrote:
> > OK, I agree with you :)  But if we support multiple backends, can
> > we keep cryptodev-linux module as one option?
>
> I'm personally against any support for out of tree kernel modules
> in QEMU, regardless of whether QEMU also implements alternative
> backends, unless there is a strong sign that the module in question
> is on the verge of being accepted into mainline Linux. That does
> not seem to be the case there - mainline settled on AF_ALG as the
> only supported approach AFAICT.

Is there any reason to embed knowledge of AF_ALG directly in QEMU,
rather than delegating that to gcrypt/nettle?

Paolo