> Herbert Valerio Riedel wrote: > On Sat, 2001-09-29 at 11:13, Herbert Valerio Riedel wrote: > > > another nice thing is, that the other 2.4.10 changes to loop.c allow us > > to get rid of one buffer-allocate+copy-overhead, by the use of > > LO_FLAGS_BH_REMAP, so we can use in-place encryption... > > > > now I've got only to audit the ciphers to check, whether they are safe > > regarding in-place operation... > > ps: this should allow swap encryption over loop devices, without the need > for pre-allocated buffers as worked around in loop-AES... > > jari, can you confirm this? :-) In-place encryption won't work for swap-out path, sorry. VM often swaps out something AND still wants to use original unmodified data. I learned that the hard way! :-) Regards, Jari Ruusu <jari.ruusu@xxxxxxxxxx> Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/
