On 2/12/19 7:31 PM, Dan Williams wrote: > Thanks, yes, fscrypt needs a closer look. As far I can see at a quick > glance fscrypt has the same physical block inputs for the encryption > algorithm as MKTME so it seems it could be crafted as a drop in > accelerator for fscrypt for pmem block devices. One bummer is that we have the platform tweak offsets to worry about. As far as I know, those are opaque to software and practically prevent us from replicating the MKTME hardware's encryption/decryption in software. Unless we can get around that, I think it rules out being a drop-in replacement for any software-driven encryption.