Cryptsetup and hardware accelerated AES-XTS
Maxim Fomin <[email protected]> Sat, 20 Jul 2024 12:15:23 +0000
| Newsgroups | dev.linux.lists.cryptsetup |
|---|---|
| Message-ID | <LzHpD7N7NryfAL3OI3b2QBM6UuT5QZuCCjpgxI7WERzccWwpn26f5urbFY5P1dqmYHIz3KRYd4qCo9pIOQtVBO2gtjgp-cBHiUrlN0DTrSs=@fomin.one> |
Hi! Recently linux kernel got[1] faster AES-XTS on modern x86_64 CPUs thanks to VAES and AVX-10/512. I decided to dig deeper into this issue and found the article[2] from 2020 stating that dm-crypt can be configured to use faster (synchronous and hardware accelerated) algorithms with 'capi:' prefix. Can cryptsetup be configured to ask dm-crypt to use hardware accelerated algorithms? [1] https://lore.kernel.org/lkml/[email protected]/T/#m83293b2699f9a5da04fc5780ee402191dace3926 [2] https://blog.cloudflare.com/speeding-up-linux-disk-encryption/ Best regards, Maxim