On Fri, Jan 6, 2017 at 2:29 PM, David Howells <dhowells@xxxxxxxxxx> wrote: > > Theodore Ts'o <tytso@xxxxxxx> wrote: > > > Many embedded SOC's are using in-line encryption engines (ICE) to > > accelerate encryption to storage devices. The way they work is that > > the ICE unit is located between the memory and the flash or other > > storage device, and when the OS submits the I/O, it includes an > > encryption key identifier, indicating which key (out of a small number > > that have been loaded into the ICE hardware) should be used. The > > hardware then takes care of doing the encryption without needing to > > keep the CPU busy doing the encryption, and without needing to use > > bounce buffers when writing encrypted blocks. > > I would be interested in joining this discussion as I've been working on > keyrings and crypto facilities inside the kernel. I led the ext4 encryption work and made the changes for ext4 encryption to use ICE on Android, so I'd like to participate in this discussion too. Note that I also have a CFP proposal submitted through the web site pending. -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html