[dm-devel] dm-crypt: add Kconfig switch to enable authenticated mode.

Mike Snitzer snitzer at redhat.com
Thu May 4 16:01:41 UTC 2017


On Thu, May 04 2017 at 11:07am -0400,
Milan Broz <gmazyland at gmail.com> wrote:

> The switch just enables dm-integrity module but it makes
> configuration more logic and user friendly.
> 
> Signed-off-by: Milan Broz <gmazyland at gmail.com>
> ---
>  drivers/md/Kconfig | 11 +++++++++++
>  1 file changed, 11 insertions(+)
> 
> diff --git a/drivers/md/Kconfig b/drivers/md/Kconfig
> index 3e96fccbbdb2..134f885c6be1 100644
> --- a/drivers/md/Kconfig
> +++ b/drivers/md/Kconfig
> @@ -285,6 +285,17 @@ config DM_CRYPT
>  
>  	  If unsure, say N.
>  
> +config DM_CRYPT_AEAD
> +	tristate "Crypt target support for authenticated disk encrytion modes"
> +	depends on DM_CRYPT
> +	select DM_INTEGRITY
> +	---help---
> +	  This option enables dm-integrity target that is required in dm-crypt
> +	  for support of authenticated encryption modes (it enables additional
> +	  per-sector metadata for authentication tags).
> +
> +	  If unsure, say N.
> +
>  config DM_SNAPSHOT
>         tristate "Snapshot target"
>         depends on BLK_DEV_DM
> -- 
> 2.11.0

For the benefit of dm-devl: we've decided to _not_ make this change.




More information about the dm-devel mailing list