lkml.org 
[lkml]   [2022]   [Jul]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[PATCH RFC 0/4] fscrypt changes for btrfs encryption
Date
This is the fscrypt section of my draft patch series [1] to add
encryption support to btrfs.

Last October, Omar Sandoval sent out a design proposal for using fscrypt
with btrfs [2]. To tersely summarize the challenges laid out in the
document, btrfs supports sharing the same physical storage between
multiple files (reflinks); moving the physical location of file data
without access to the file inodes; and creating writable snapshots of
some directories (subvolumes). To allow encryption to coexist with these
features, the proposal was for btrfs to create and preserve an IV per
data block, no matter its physical location or owning inode(s), and for
btrfs to allow partially-encrypted writable snapshots of unencrypted
subvolumes.

To deal with these issues, a few changes to fscrypt are proposed:
- To enable snapshotting and then encrypting new writes to that
subvolume, a flag to allow partially encrypted directories;
- To allow filesystems to supply an IV in cases where the logical block
number and owning inode for data may change, a new policy and
interface to convey IVs from filesystem to fscrypt.

Comments, especially on the new policy and interface, appreciated!

[1] https://lore.kernel.org/linux-btrfs/cover.1658623319.git.sweettea-kernel@dorminy.me
[2] https://lore.kernel.org/linux-btrfs/YXGyq+buM79A1S0L@relinquished.localdomain/

Omar Sandoval (3):
fscrypt: expose fscrypt_nokey_name
fscrypt: add flag allowing partially-encrypted directories
fscrypt: add fscrypt_have_same_policy() to check inode's compatibility

Sweet Tea Dorminy (1):
fscrypt: Add new encryption policy for btrfs.

fs/crypto/crypto.c | 28 +++++++++++++++--
fs/crypto/fname.c | 56 ++++++++++-----------------------
fs/crypto/fscrypt_private.h | 4 +--
fs/crypto/inline_crypt.c | 20 ++++++++----
fs/crypto/keysetup.c | 5 +++
fs/crypto/policy.c | 42 ++++++++++++++++++++++++-
include/linux/fscrypt.h | 61 +++++++++++++++++++++++++++++++++++-
include/uapi/linux/fscrypt.h | 1 +
8 files changed, 166 insertions(+), 51 deletions(-)

--
2.35.1

\
 
 \ /
  Last update: 2022-07-24 02:53    [W:0.063 / U:0.564 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site