Re: Cryptsetup -- OpenSSL Engine
Milan Broz <[email protected]>
| Newsgroups | gmane.linux.kernel.device-mapper.dm-crypt |
|---|---|
| Message-ID | <[email protected]> |
On 03/01/2019 20:37, Anil Reddy wrote: > Hi -- To configure cryptsetup -- We do see that /|--with-crypto_backend=openssl|/ takes OpenSSL as a default Crypto engine. We would like to use the -engine concept of OpenSSL where we can use Hardware Accelerator (for example Intel's Quick Assist Technology) as Crypto engine instead of Software based OpenSSL. Can you please suggest if we can configure cryptsetup with openssl engine? What that engine should accelerate here? Do you want it for the data encryption? If so, then it is kernel dm-crypt that performs it, so you need crypt API acceleration driver in kernel. Userspace (cryptsetup) is used only for unlocking and configuring encrypted device. I do not see much sense for such acceleration. (I have never tried to configure external OpenSSL engine for cryptsetup, maybe some code tweak is needed to load proper/default openSSL config file.) Milan _______________________________________________ dm-crypt mailing list [email protected] https://www.saout.de/mailman/listinfo/dm-crypt