On Thu, Apr 06 2017 at 5:29am -0400, Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> wrote: > On Fri, Mar 10, 2017 at 02:44:26PM +0100, Ondrej Mosnacek wrote: > > Hi all, > > > > I was tasked to post a summary the whole dm-crypt IV generation > > problem and all the suggested solutions along with their drawbacks, so > > here it goes... > > Thanks for the summary. It looks good to me. There were 4 different solutions presented. In reading each, option 2 looked the most promising. BUT it requires a tradeoff/decision to be made, please see my earlier reply where I asked for your (and/or Milan's) thoughts: https://www.spinics.net/lists/linux-crypto/msg24586.html Thanks, Mike