From: levent demir <levent.demir@inria.fr>
To: dm-crypt@saout.de
Subject: [dm-crypt] Cryptesetup and dm-crypt
Date: Wed, 27 Apr 2016 14:56:50 +0200 [thread overview]
Message-ID: <1461761810.6452.16.camel@inria.fr> (raw)
In-Reply-To: <56E73AE2.9020404@gmail.com>
Hi,
I am a PhD student and works and I am working with cryptsetup and a hw
crypto engine.
I am using an ATMEL board which is able to do AES-ECB mode for example.
We have implemented an XTS version with all operations (XOR, GF
Multiplication, 2 AES : one for IV one for data...)
My question is can we use the page size instead of the block size of 512
bytes ?
I have read some thread it is written that it could be a security issue
but I don't agree because :
Now to implement XTS I do as follows basically :
I take the IV encrypt it with the second part of the key, then I compute
the 32 tweaks values in -for example- an array tweak_buf[512].
Then I just have to compute the XOR with plaintext.
I do a DMA encryption with ECB of the 512 bytes.
Again I xor the ciphered data with tweak_buf.
Then I have ciphered a whole block of 512 bytes.
Now my question, the hardware is supporting a DMA operation till 4096,
is it not interesting to encrypt 8 blocks at a time ?
It is exactly the same operation as encrypting each block
consecutively.
Of course I need to pre-compute the 8 tweak_buf in a big
tweak_buf[4096].Then in only one DMA operation I will be able to encrypt
4096 bytes with ECB mode.
I hope you understand what I mean.
Can you tell me if it is possible ? If yes can I use a previous patch, I
have seen that there are some works on it ?
Thank you.
next prev parent reply other threads:[~2016-04-27 13:00 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-03-14 15:21 [dm-crypt] Some questions/clarifications around the LUKS spec Daniel P. Berrange
2016-03-14 18:58 ` Sven Eschenberg
2016-03-14 19:54 ` Milan Broz
2016-03-14 21:24 ` Sven Eschenberg
2016-03-14 22:27 ` Milan Broz
2016-03-15 14:21 ` Sven Eschenberg
2016-04-27 12:56 ` levent demir [this message]
2016-04-27 16:35 ` [dm-crypt] Cryptesetup and dm-crypt Arno Wagner
2016-03-14 20:31 ` [dm-crypt] Some questions/clarifications around the LUKS spec Milan Broz
2016-03-15 10:23 ` Daniel P. Berrange
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1461761810.6452.16.camel@inria.fr \
--to=levent.demir@inria.fr \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.