Interfaces for combining calls in an emulated environment

摘要

Calls from an application in an emulated environment to a module in the operating system hosting the emulated environment may be combined to reduce the overhead of accessing the module. An application handling secure shell (SSH) communications may execute multiple calls to a cryptographic module in the host operating system. Because many calls to the cryptographic module during SSH communications follow patterns, two or more related calls may be combined into a single combined call to the cryptographic module. For example, a call to generate a server-to-client key and a call to generate a client-to-server key may be combined into a single call.

主权项

1. A method for providing secure communications to an application in an emulated environment, comprising:
receiving a first call comprising a request for producing a server-to-client encryption key, the first call being received from the application to a security module located outside the emulated environment, for processing data during a secure shell session; receiving a second call comprising a request for producing a client-to-server encryption key, the second call being received from the application to the security module located outside the emulated environment, for processing data during the secure shell session; combining the first call and the second call in a combined call; and executing the combined call to the security module located outside the emulated environment.