Illumos Crypto Port module added to enable native encryption in zfs

Browse Source

A port of the Illumos Crypto Framework to a Linux kernel module (found
in module/icp). This is needed to do the actual encryption work. We cannot
use the Linux kernel's built in crypto api because it is only exported to
GPL-licensed modules. Having the ICP also means the crypto code can run on
any of the other kernels under OpenZFS. I ended up porting over most of the
internals of the framework, which means that porting over other API calls (if
we need them) should be fairly easy. Specifically, I have ported over the API
functions related to encryption, digests, macs, and crypto templates. The ICP
is able to use assembly-accelerated encryption on amd64 machines and AES-NI
instructions on Intel chips that support it. There are place-holder
directories for similar assembly optimizations for other architectures
(although they have not been written).

Signed-off-by: Tom Caputi <tcaputi@datto.com>
Signed-off-by: Tony Hutter <hutter2@llnl.gov>
Signed-off-by: Brian Behlendorf <behlendorf1@llnl.gov>
Issue #4329

...

This commit is contained in:

Tom Caputi

2016-05-12 10:51:24 -04:00

committed by Brian Behlendorf

parent be88e733a6

commit 0b04990a5d

90 changed files with 35834 additions and 80 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

module/icp/io/aes.c

+1437

File diff suppressed because it is too large Load Diff

module/icp/io/sha1_mod.c

+1239

File diff suppressed because it is too large Load Diff

module/icp/io/sha2_mod.c

+1307

File diff suppressed because it is too large Load Diff