Re: [LSF/MM TOPIC] Memory Encryption on top of filesystems

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Feb 13, 2019 at 07:51:12AM -0800, Dave Hansen wrote:
> On 2/12/19 7:31 PM, Dan Williams wrote:
> > Thanks, yes, fscrypt needs a closer look. As far I can see at a quick
> > glance fscrypt has the same physical block inputs for the encryption
> > algorithm as MKTME so it seems it could be crafted as a drop in
> > accelerator for fscrypt for pmem block devices.
> 
> One bummer is that we have the platform tweak offsets to worry about.

What's a "platform tweak offset"?

> As far as I know, those are opaque to software and practically prevent
> us from replicating the MKTME hardware's encryption/decryption in software.

We're not trying to replicate the encryption in software, just use
the existing software to manage the keys that get fed to the
hardware so it can do the encrypt/decrypt operations as the data
passes through it.

Cheers,

Dave.
-- 
Dave Chinner
david@xxxxxxxxxxxxx



[Index of Archives]     [Linux Ext4 Filesystem]     [Union Filesystem]     [Filesystem Testing]     [Ceph Users]     [Ecryptfs]     [AutoFS]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux Cachefs]     [Reiser Filesystem]     [Linux RAID]     [Samba]     [Device Mapper]     [CEPH Development]

  Powered by Linux