[lkml]   [2017]   [Mar]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] fscrypt: Add support for AES-128-CBC
On Thu, Mar 30, 2017 at 11:21:49PM -0700, Eric Biggers wrote:
> Something else to consider (probably for the future; this doesn't necessarily
> have to be done yet) is that you really only need one essiv_tfm per *key*, not
> one per inode. To deduplicate them you'd need a hash table or LRU queue or
> something to keep track of the keys in use.

Sorry, I screwed this up. This wouldn't work because the ESSIV key is being
derived from the per-file key, not the master key.

- Eric

 \ /
  Last update: 2017-03-31 08:36    [W:0.098 / U:1.452 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site