Daniel Walter 8e989de6f8
fscrypt: add support for AES-128-CBC ...
fscrypt provides facilities to use different encryption algorithms which
are selectable by userspace when setting the encryption policy. Currently,
only AES-256-XTS for file contents and AES-256-CBC-CTS for file names are
implemented. This is a clear case of kernel offers the mechanism and
userspace selects a policy. Similar to what dm-crypt and ecryptfs have.
This patch adds support for using AES-128-CBC for file contents and
AES-128-CBC-CTS for file name encryption. To mitigate watermarking
attacks, IVs are generated using the ESSIV algorithm. While AES-CBC is
actually slightly less secure than AES-XTS from a security point of view,
there is more widespread hardware support. Using AES-CBC gives us the
acceptable performance while still providing a moderate level of security
for persistent storage.
Especially low-powered embedded devices with crypto accelerators such as
CAAM or CESA often only support AES-CBC. Since using AES-CBC over AES-XTS
is basically thought of a last resort, we use AES-128-CBC over AES-256-CBC
since it has less encryption rounds and yields noticeable better
performance starting from a file size of just a few kB.
Signed-off-by: Daniel Walter <dwalter@sigma-star.at >
[david@sigma-star.at: addressed review comments]
Signed-off-by: David Gstir <david@sigma-star.at>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
2017-07-13 17:48:36 -07:00
2016-03-17 15:09:34 -07:00
2016-06-17 15:39:46 +02:00
2016-09-09 09:53:35 -03:00
2016-08-22 22:43:35 +02:00
2016-05-29 20:03:21 +01:00
2017-06-17 06:41:58 +02:00
2015-11-23 17:54:38 +01:00
2015-11-23 17:54:38 +01:00
2015-11-23 17:54:38 +01:00
2015-11-23 17:54:38 +01:00
2016-01-06 11:39:53 +11:00
2016-12-05 19:43:02 -05:00
2017-06-24 07:11:15 +02:00
2015-12-10 12:33:23 +01:00
2016-11-13 12:35:13 -05:00
2016-10-04 14:21:41 -07:00
2016-10-11 15:06:31 -07:00
2016-03-15 16:55:16 -07:00
2016-10-11 15:06:31 -07:00
2016-08-09 07:54:43 +02:00
2016-09-02 10:46:44 -07:00
2016-09-23 08:40:28 -04:00
2016-11-13 00:57:53 -05:00
2016-09-29 19:05:06 -05:00
2016-04-28 11:06:41 +02:00
2016-10-03 18:52:14 +02:00
2016-12-07 10:45:57 +01:00
2016-08-02 17:31:41 -04:00
2016-05-03 14:59:30 -07:00
2016-06-23 18:29:56 +08:00
2016-07-02 14:40:40 -04:00
2016-07-20 23:49:49 -04:00
2016-02-12 16:01:32 +01:00
2016-02-08 11:21:50 +11:00
2016-07-20 12:37:39 -07:00
2016-08-05 09:00:54 -04:00
2017-07-05 14:40:19 +02:00
2016-01-20 17:09:18 -08:00
2016-10-03 09:11:14 -07:00
2016-06-08 11:36:02 -07:00
2017-07-13 17:48:36 -07:00
2016-10-01 07:32:32 +02:00
2016-04-26 12:00:49 -04:00
2016-02-11 09:53:19 -05:00
2015-12-14 12:19:37 -06:00
2016-06-15 09:29:17 +02:00
2016-06-07 16:25:49 -07:00
2015-12-20 15:27:12 +02:00
2015-12-14 19:12:21 -08:00
2016-06-17 13:24:05 +02:00
2016-06-18 22:11:39 -07:00
2016-08-18 23:18:42 -07:00
2016-07-19 20:49:16 -07:00
2016-09-24 08:01:26 -04:00
2016-07-25 10:55:39 -07:00
2016-08-22 16:25:14 -07:00
2016-08-22 16:25:15 -07:00
2016-09-25 23:34:19 +02:00
2016-12-06 10:43:32 -05:00
2016-04-26 01:27:07 -04:00
2016-06-27 15:02:51 -04:00
2016-09-21 00:23:01 -04:00
2016-11-30 08:59:26 -08:00
2016-08-17 11:13:08 +02:00
2016-04-25 15:09:11 -04:00
2016-02-11 04:27:35 -05:00
2017-05-03 08:36:36 -07:00
2016-09-30 01:54:28 -04:00
2016-08-22 16:25:15 -07:00
2016-10-23 15:56:23 -07:00
2016-03-09 16:36:14 -05:00
2016-03-22 15:36:02 -07:00
2016-03-04 16:10:36 -05:00
2016-06-27 16:31:25 +01:00
2016-04-12 19:54:58 +01:00
2016-11-19 19:04:16 +01:00
2016-04-25 15:09:10 -04:00
2016-08-22 16:25:15 -07:00
2016-01-12 08:21:18 -07:00
2016-07-11 10:49:52 -03:00
2016-04-23 20:13:24 -04:00
2016-08-23 22:58:51 -07:00
2016-09-09 11:16:36 -03:00
2016-08-23 16:28:04 -03:00
2016-08-12 16:57:20 -07:00
2016-03-04 16:10:36 -05:00
2015-11-23 15:06:38 -05:00
2016-08-15 11:07:21 -07:00
2016-04-23 20:13:24 -04:00
2016-04-04 15:50:30 -04:00
2016-03-13 21:54:44 -04:00
2015-11-23 17:54:38 +01:00
2016-06-16 14:00:50 -07:00
2016-02-18 11:42:18 -05:00
2016-09-26 15:20:37 -04:00
2015-11-23 21:53:08 -05:00
2016-08-02 19:35:21 -04:00
2016-08-02 19:35:21 -04:00
2017-01-12 11:39:23 +01:00
2016-09-22 19:59:41 -05:00
2016-05-17 17:14:21 -06:00
2016-09-08 17:10:27 -07:00
2017-03-22 12:43:34 +01:00
2016-10-14 15:00:10 -04:00
2016-05-30 12:41:44 -03:00
2016-09-21 19:50:02 -04:00
2016-09-23 07:19:06 -04:00
2016-09-27 21:52:00 -04:00
2016-09-27 21:52:00 -04:00
2016-03-03 14:23:43 -08:00
2016-05-08 23:46:14 -04:00
2016-04-26 12:00:48 -04:00
2016-02-24 09:04:25 +01:00
2016-08-02 19:35:31 -04:00
2016-05-05 17:38:53 -07:00
2016-10-19 11:07:57 -04:00
2016-02-16 13:04:58 -05:00
2016-08-08 12:51:58 -07:00
2016-05-20 20:57:27 -07:00
2016-09-27 12:55:50 +02:00
2015-12-13 19:59:48 -08:00
2016-07-12 13:42:10 -03:00
2016-05-04 08:34:14 +02:00
2016-08-25 16:43:11 -07:00
2016-04-04 22:11:20 -04:00
2016-01-05 16:44:06 -05:00
2016-03-30 12:50:17 +02:00
2016-05-05 17:38:53 -07:00
2016-09-20 18:12:38 +05:30
2016-08-02 17:31:41 -04:00
2016-03-10 21:49:09 -08:00
2016-04-23 20:13:24 -04:00
2016-09-21 00:23:00 -04:00
2016-08-26 21:38:41 -07:00
2016-07-26 14:26:42 -07:00
2016-04-30 09:26:55 -07:00
2016-05-10 12:25:04 -04:00
2015-12-18 17:48:51 -08:00
2016-03-05 12:05:01 -08:00
2016-05-20 17:58:30 -07:00
2016-02-01 08:47:05 -02:00
2016-02-19 08:10:35 -02:00
2016-09-19 14:34:41 -03:00
2016-02-22 16:10:09 -07:00
2016-08-02 16:53:54 +03:00
2017-02-23 17:44:37 +01:00
2016-03-17 15:09:34 -07:00
2016-03-02 17:01:59 +02:00
2016-08-01 21:44:52 +03:00
2015-12-10 12:33:23 +01:00
2016-08-02 02:57:29 +03:00
2016-06-10 23:03:55 -07:00
2016-08-09 13:42:38 +03:00
2016-04-30 09:26:55 -07:00
2016-06-25 17:26:35 +03:00
2016-06-09 10:14:39 +02:00
2016-09-09 09:10:07 +02:00
8e989de6f8