Friday, October 24, 2025

New GNU Radio Linux Crypto Module

What This Module Provides (Unique Features)

### 1. **Kernel Keyring Integration**
- **Unique to Linux**: Direct integration with Linux kernel keyring
- **Secure key storage**: Keys protected by kernel, not user space
- **Key management**: Add, retrieve, link, unlink keys from kernel keyring
- **No duplication**: This is NOT available in gr-openssl or gr-nacl

### 2. **Hardware Security Module Integration**  
- **Nitrokey support**: Hardware-based key storage and operations
- **TPM integration**: Trusted Platform Module support
- **Hardware acceleration**: Use hardware crypto when available
- **No duplication**: This is NOT available in existing modules

### 3. **Kernel Crypto API Integration**
- **AF_ALG sockets**: Direct use of Linux kernel crypto subsystem
- **Hardware acceleration**: CPU crypto instructions via kernel
- **Performance**: Bypass user-space crypto libraries when possible
- **No duplication**: This is NOT available in existing modules

## What This Module Does NOT Provide (Avoiding Duplication)

### **Basic OpenSSL Operations**
- **Use gr-openssl instead**: Symmetric encryption, hashing, HMAC
- **Don't duplicate**: AES, SHA, RSA operations are already in gr-openssl
- **Integration only**: Provide kernel keyring as key source for gr-openssl

### **Modern Crypto (NaCl/libsodium)**
- **Use gr-nacl instead**: Curve25519, Ed25519, ChaCha20-Poly1305
- **Don't duplicate**: Public-key crypto, authenticated encryption
- **Integration only**: Provide hardware key storage for gr-nacl

The code has been fuzzed and compiles.

Fuzzing results:

  • 18.4+ billion test executions
  • 469 total edges covered
  • 100% stability across all components
  • Zero security vulnerabilities found




https://github.com/Supermagnum/gr-linux-crypto-

No comments:

Post a Comment