[dm-devel] [PATCH v4 00/13] x86: Support Key Locker

Bae, Chang Seok chang.seok.bae at intel.com
Thu Jan 6 06:13:00 UTC 2022


On Jan 5, 2022, at 21:07, Eric Biggers <ebiggers at kernel.org> wrote:
> On Wed, Jan 05, 2022 at 09:55:17PM +0000, Bae, Chang Seok wrote:
>> 
>> As long as it is factual that the mode was once popular, it can help somebody
>> who wants to use Key Locker for an old disk image I think.
> 
> AES-CBC is/was usually used with ESSIV, in which case the key cannot be fully
> protected by Key Locker.
> 
> I'm not sure you should bother to support legacy use cases, especially since it
> might mislead users into choosing a worse algorithm.

Alright, this is not that critical as it will be possible to add this mode
later when needed.

Thanks,
Chang





More information about the dm-devel mailing list