Re: Cryptsetup -- OpenSSL Engine

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 03/01/2019 20:37, Anil Reddy wrote:
> Hi -- To configure cryptsetup -- We do see that  /|--with-crypto_backend=openssl|/  takes OpenSSL as a default Crypto engine. We would like to use the -engine concept of OpenSSL where we can use Hardware Accelerator (for example Intel's Quick Assist Technology) as Crypto engine instead of Software based OpenSSL. Can you please suggest if we can configure cryptsetup with openssl engine?   

What that engine should accelerate here?

Do you want it for the data encryption? If so, then it is kernel dm-crypt that performs it,
so you need crypt API acceleration driver in kernel.

Userspace (cryptsetup) is used only for unlocking and configuring encrypted device.
I do not see much sense for such acceleration.

(I have never tried to configure external OpenSSL engine for cryptsetup, maybe some
code tweak is needed to load proper/default openSSL config file.)

Milan
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
https://www.saout.de/mailman/listinfo/dm-crypt




[Index of Archives]     [Device Mapper Devel]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Packaging]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux