From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx1.redhat.com (mx1.redhat.com [209.132.183.28]) by mail.saout.de (Postfix) with ESMTP for ; Sat, 26 Feb 2011 11:18:55 +0100 (CET) Message-ID: <4D68D38B.9010600@redhat.com> Date: Sat, 26 Feb 2011 11:18:51 +0100 From: Milan Broz MIME-Version: 1.0 References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: [dm-crypt] hardware encryption question List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Chuck Tuffli Cc: dm-crypt@saout.de On 02/26/2011 12:35 AM, Chuck Tuffli wrote: > I'm developing a device driver for a SCSI card that is able to do > XTS-AES encryption as a part of IO. Is it possible for dm-crypt to > take advantage of this encryption offload? If not, what would I need > to change to enable this capability? TIA! dm-crypt uses kernel cryptoAPI, so if you implement proper driver for cryptoAPI and this driver will be primary (or automatically detected) for the cipher/mode it will be used in dm-crypt. But it if it is not able to separate encryption from io path, you cannot use it in dm-crypt. But you can stack other block devices over it (like LVM). Milan