Re: dropping the non-inline mode for fscrypt?
Eric Biggers <[email protected]> Tue, 3 Mar 2026 11:31:33 -0800
| Newsgroups | org.kernel.vger.linux-fscrypt,org.kernel.vger.linux-fsdevel |
|---|---|
| Message-ID | <20260303193133.GB2846@sol> |
On Tue, Mar 03, 2026 at 05:55:46PM +0100, Christoph Hellwig wrote: > On Mon, Mar 02, 2026 at 01:22:36PM -0800, Eric Biggers wrote: > > On Mon, Mar 02, 2026 at 03:27:18PM +0100, Christoph Hellwig wrote: > > > After just having run into another issue with missing testing for one of > > > the path, I'd like to ask if we should look into dropping the non-inline > > > mode for block based fscrypt? > > > > Yes, I think that's the way to go now. > > > > I do think the default should continue to be to use the well-tested > > CPU-based encryption code (just accessed via blk-crypto-fallback > > instead). Inline encryption hardware should continue to be opt-in via > > the inlinecrypt mount option, rather than used unconditionally. To > > allow this, we'll need to add a field 'allow_hardware' or similar to > > struct bio_crypt_ctx. Should be fairly straightforward though. > > Sounds fine. Given that you're more familiar with this can I sign > up you to do it? Otherwise I can add it to my todo list, but chances > are that I'll get some of the subtle interactions wrong. Yes, I'll try to find time for this. - Eric