Skip to content
  • Milan Broz's avatar
    dm crypt: add multi key capability · d1f96423
    Milan Broz authored
    
    
    This patch adds generic multikey handling to be used
    in following patch for Loop-AES mode compatibility.
    
    This patch extends mapping table to optional keycount and
    implements generic multi-key capability.
    
    With more keys defined the <key> string is divided into
    several <keycount> sections and these are used for tfms.
    
    The tfm is used according to sector offset
    (sector 0->tfm[0], sector 1->tfm[1], sector N->tfm[N modulo keycount])
    (only power of two values supported for keycount here).
    
    Because of tfms per-cpu allocation, this mode can be take
    a lot of memory on large smp systems.
    
    Signed-off-by: default avatarMilan Broz <mbroz@redhat.com>
    Signed-off-by: default avatarAlasdair G Kergon <agk@redhat.com>
    Cc: Max Vozeler <max@hinterhof.net>
    d1f96423