Theodore Ts'o <tytso@xxxxxxx> wrote: > Many embedded SOC's are using in-line encryption engines (ICE) to > accelerate encryption to storage devices. The way they work is that > the ICE unit is located between the memory and the flash or other > storage device, and when the OS submits the I/O, it includes an > encryption key identifier, indicating which key (out of a small number > that have been loaded into the ICE hardware) should be used. The > hardware then takes care of doing the encryption without needing to > keep the CPU busy doing the encryption, and without needing to use > bounce buffers when writing encrypted blocks. I would be interested in joining this discussion as I've been working on keyrings and crypto facilities inside the kernel. David -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
