On Fri, Jun 09, 2023 at 08:57:36PM +0900, Dongsoo Lee wrote: > Unfortunately, currently, vendors trying to supply Linux-based data-at-rest > encryption products by utilizing the dm-crypt or the fscrypt modules to > government agencies or public institutions in Korea are experiencing great > difficulties. Why are they having "great difficulties" when the kernel already supports two other "KCMVP-approved block ciphers", ARIA and SEED? Why aren't they using dm-crypt with ARIA or SEED? > According to Korean regulations, the data transmitted and stored by > government agencies and public institutions must be protected using KCMVP > validated cryptographic modules. And does LEA (or SEED or ARIA) support in Linux actually solve that problem? Just adding support for these algorithms to Linux does not mean that Linux automatically becomes a "KCMVP validated cryptographic module", right? Do you have a complete plan that would actually solve the claimed problem? - Eric
