mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2026-05-27 04:32:16 +03:00
Illumos Crypto Port module added to enable native encryption in zfs
A port of the Illumos Crypto Framework to a Linux kernel module (found in module/icp). This is needed to do the actual encryption work. We cannot use the Linux kernel's built in crypto api because it is only exported to GPL-licensed modules. Having the ICP also means the crypto code can run on any of the other kernels under OpenZFS. I ended up porting over most of the internals of the framework, which means that porting over other API calls (if we need them) should be fairly easy. Specifically, I have ported over the API functions related to encryption, digests, macs, and crypto templates. The ICP is able to use assembly-accelerated encryption on amd64 machines and AES-NI instructions on Intel chips that support it. There are place-holder directories for similar assembly optimizations for other architectures (although they have not been written). Signed-off-by: Tom Caputi <tcaputi@datto.com> Signed-off-by: Tony Hutter <hutter2@llnl.gov> Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov> Issue #4329
This commit is contained in:
committed by
Brian Behlendorf
parent
be88e733a6
commit
0b04990a5d
+4
-1
@@ -39,7 +39,7 @@ AC_CONFIG_MACRO_DIR([config])
|
||||
AC_CANONICAL_SYSTEM
|
||||
AM_MAINTAINER_MODE
|
||||
m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
|
||||
AM_INIT_AUTOMAKE
|
||||
AM_INIT_AUTOMAKE([subdir-objects])
|
||||
AC_CONFIG_HEADERS([zfs_config.h], [
|
||||
(mv zfs_config.h zfs_config.h.tmp &&
|
||||
awk -f ${ac_srcdir}/config/config.awk zfs_config.h.tmp >zfs_config.h &&
|
||||
@@ -85,6 +85,7 @@ AC_CONFIG_FILES([
|
||||
lib/libspl/include/util/Makefile
|
||||
lib/libavl/Makefile
|
||||
lib/libefi/Makefile
|
||||
lib/libicp/Makefile
|
||||
lib/libnvpair/Makefile
|
||||
lib/libunicode/Makefile
|
||||
lib/libuutil/Makefile
|
||||
@@ -125,12 +126,14 @@ AC_CONFIG_FILES([
|
||||
module/zcommon/Makefile
|
||||
module/zfs/Makefile
|
||||
module/zpios/Makefile
|
||||
module/icp/Makefile
|
||||
include/Makefile
|
||||
include/linux/Makefile
|
||||
include/sys/Makefile
|
||||
include/sys/fs/Makefile
|
||||
include/sys/fm/Makefile
|
||||
include/sys/fm/fs/Makefile
|
||||
include/sys/crypto/Makefile
|
||||
scripts/Makefile
|
||||
scripts/zpios-profile/Makefile
|
||||
scripts/zpios-test/Makefile
|
||||
|
||||
Reference in New Issue
Block a user