On Tue, Oct 04, 2016 at 10:46:54AM +0200, Richard Weinberger wrote: > > Also, currently this code *is* only supposed to be used for XTS. There's a bug > > where a specially crafted filesystem can cause this code path to be entered with > > CTS, but I have a patch pending in the ext4 tree to fix that. > > David and I are currently working on UBIFS encryption and we have to support other cipher > modes than XTS. So, keeping fscrypto as generic as possible would be nice. :-) > The problem was that the kernel supported reading a file whose contents was encrypted with CTS, which is only supposed to be used for filenames. This was inconsistent with FS_IOC_SET_ENCRYPTION_POLICY which currently only allows XTS for contents and CTS for filenames. So in other words I wanted to eliminate a strange scenario that was not intended to happen and was almost certainly never tested. Either way, new modes can still be added if there is a good reason to do so. What new encryption modes are you thinking of adding, would they be for contents or for filenames, and are you thinking they would be offered by all filesystems (ext4 and f2fs too)? Eric -- To unsubscribe from this list: send the line "unsubscribe linux-ext4" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
