Files
linux/include/uapi/linux
Daniel Walter 73a2900701 fscrypt: add support for AES-128-CBC
fscrypt provides facilities to use different encryption algorithms which
are selectable by userspace when setting the encryption policy. Currently,
only AES-256-XTS for file contents and AES-256-CBC-CTS for file names are
implemented. This is a clear case of kernel offers the mechanism and
userspace selects a policy. Similar to what dm-crypt and ecryptfs have.

This patch adds support for using AES-128-CBC for file contents and
AES-128-CBC-CTS for file name encryption. To mitigate watermarking
attacks, IVs are generated using the ESSIV algorithm. While AES-CBC is
actually slightly less secure than AES-XTS from a security point of view,
there is more widespread hardware support. Using AES-CBC gives us the
acceptable performance while still providing a moderate level of security
for persistent storage.

Especially low-powered embedded devices with crypto accelerators such as
CAAM or CESA often only support AES-CBC. Since using AES-CBC over AES-XTS
is basically thought of a last resort, we use AES-128-CBC over AES-256-CBC
since it has less encryption rounds and yields noticeable better
performance starting from a file size of just a few kB.

Signed-off-by: Daniel Walter <dwalter@sigma-star.at>
[david@sigma-star.at: addressed review comments]
Signed-off-by: David Gstir <david@sigma-star.at>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
2017-07-13 17:52:43 -07:00
..
2014-10-20 10:30:15 +08:00
2015-10-13 17:42:34 +02:00
2014-09-23 23:15:46 -07:00
2015-04-21 16:16:02 -04:00
2015-10-05 03:16:46 -07:00
2013-04-26 16:08:16 +10:00
2014-07-01 10:48:05 -06:00
2014-03-20 14:55:18 +01:00
2015-08-25 14:41:50 -05:00
2014-11-19 14:48:02 -06:00
2012-10-16 18:49:15 -07:00
2014-08-08 15:57:31 -07:00
2015-04-12 21:25:13 -04:00
2017-07-13 17:52:43 -07:00
2015-07-01 16:26:08 +02:00
2014-05-14 10:04:34 +01:00
2013-12-11 12:57:55 -08:00
2013-08-13 15:10:22 -07:00
2014-12-22 16:12:36 -05:00
2015-10-26 19:06:48 -07:00
2015-05-25 13:25:35 -04:00
2014-12-02 13:52:53 -07:00
2015-02-17 14:34:51 -08:00
2015-08-03 17:30:00 -07:00
2014-08-08 15:57:31 -07:00
2015-07-21 10:39:05 -07:00
2015-01-20 13:51:06 +01:00
2014-12-13 12:42:52 -08:00
2015-05-05 13:40:44 -06:00
2015-02-02 18:46:51 -08:00
2015-08-27 19:44:53 -04:00
2015-04-23 15:16:14 -04:00
2015-07-20 14:58:46 -04:00
2012-11-16 10:15:35 -08:00
2015-09-17 21:09:07 -07:00
2015-09-04 16:54:41 -07:00
2014-03-21 14:21:13 -04:00
2014-12-10 17:41:10 -08:00
2014-12-09 14:10:41 +08:00
2013-03-22 16:19:59 -07:00
2015-03-05 22:08:42 -05:00
2014-04-26 12:13:24 -04:00
2015-05-24 12:49:16 -07:00
2015-06-11 23:37:37 +02:00
2015-10-27 18:55:31 -07:00
2015-12-04 08:38:42 -07:00
2015-10-16 10:44:02 +02:00
2015-06-03 14:17:38 +02:00
2015-03-29 12:13:52 +10:30
2014-12-09 12:05:24 +02:00
2015-03-31 13:58:35 -04:00