Why can't long-term private keys be protected, and used solely by, the kernel?
Linux CryptoAPI seems to have an asymmetric key interface[0], RSA signatures are implemented[1], and there's even a x509/ASN1 parser[1]. Shouldn't this be the default on Linux rather than furthering the NIH syndrome with crude library-local allocators? In the very least, shouldn't there be a secure malloc in glibc? If not, why doesn't OpenSSL use an existing secure malloc library[2]?
[0] https://www.kernel.org/doc/Documentation/crypto/asymmetric-k...
[1] https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux....