What are the cryptographic capabilities of linux?

Question

linux

Tell me, what are the cryptographic capabilities in Linux distributions, how does the axis work with cryptographic providers? For example, windows has a CryptoAPI...

Answer 1

There is no generally accepted implementation of providers in the usual Windows representation.
The kernel has a crypto subsystem and some API to it - this is the implementation of all the main crypto primitives for nuclear use.
And in usermode - there is nothing ready, unified and convenient, you have to use purely usermode libraries yourself: openssl, gnutls, libnss and others like them.
Everything else is marginal experiments (port /dev/crypto from OpenBSD ( www.logix.cz/michal/devel/cryptodev ), patches in the same openssl that call the corresponding implementations of functions from the kernel through analogues of this /dev/crypto, etc.).

Answer 2

The system has absolutely all the possibilities for working with crypto, ranging from organizing IPsec crypto tunnels, ssl / tls tunnels, crypto disks, crypto containers, and ending with cryptography libraries like openssl. Not always all this is specified in a single API, as in java or microsoft, but this does not work any worse. It's just that there are all this in several implementations, and sometimes it's quite difficult to choose what to use.
Typically, openssl is used as the standard for crypto APIs.

Answer 3

What is the idea/goal of the task?

Answer 4

dm-crypt

Answer 5

In Linux, you can encrypt anything: from a pornographic picture to the entire disk, along with the root and the kernel.