[dm-crypt] Twofish 3-way
Arno Wagner
arno at wagner.name
Thu Jan 12 17:28:15 CET 2012
Do I understand this right that this can only work if you
have independent disk accesses? For a single sector, the
mode would prevent any paralellization (unless you set
ECB, which is definitely not a good idea).
Arno
On Thu, Jan 12, 2012 at 04:22:59PM +0100, Milan Broz wrote:
> On 01/12/2012 04:06 PM, Heinz Diehl wrote:
> >Hi,
> >
> >since kernel 3.2 there is a new parallelized variant of twofish
> >available via
> >
> >CONFIG_CRYPTO_TWOFISH_X86_64_3WAY
> >
> >How can I use it with LUKS/dmcrypt? My current config contains the
> >following:
> >
> ># CONFIG_CRYPTO_TWOFISH is not set
> >CONFIG_CRYPTO_TWOFISH_COMMON=y
> >CONFIG_CRYPTO_TWOFISH_X86_64=y
> >CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=y
> >
> >How should these options be set up properly?
>
> You cannot set directly which version is used through dmcrypt interface,
> (without patching kernel source) but cryptoAPI should detect the fastest
> algorithm automatically.
>
> For separate modules, force load just that module and unload all other
> should perhaps work as well (before crypto device activation).
>
> (see /proc/crypto and lsmod modules reference count to check which one
> is really used)
>
> Milan
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
>
--
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno at wagner.name
GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F
----
One of the painful things about our time is that those who feel certainty
are stupid, and those with any imagination and understanding are filled
with doubt and indecision. -- Bertrand Russell
More information about the dm-crypt
mailing list