On Mon, Nov 30, 2020 at 10:39:10AM -0800, Eric Biggers wrote: > (Allowing only direct I/O on files that don't have encryption key unavailable > may help...) It may sense to only provide the ciphertext when reads are done using RWF_ENCODED (https://lkml.kernel.org/linux-fsdevel/cover.1605723568.git.osandov@xxxxxx), rather than making normal reads return ciphertext when the key is unavailable. Ciphertext reads would always be uncached, which would avoid two conflicting uses of the same address_space. - Eric
