dm crypt: add multi key capability
authorMilan Broz <mbroz@redhat.com>
Thu, 13 Jan 2011 19:59:54 +0000 (19:59 +0000)
committerAlasdair G Kergon <agk@redhat.com>
Thu, 13 Jan 2011 19:59:54 +0000 (19:59 +0000)
commitd1f9642381847e2b94caa34c3533211cf36ffcf4
tree32ae1cc4b0946247384fe1a31e257658f734b3f7
parent2dc5327d3acb3340ab6fa3981401b076b78a51f4
dm crypt: add multi key capability

This patch adds generic multikey handling to be used
in following patch for Loop-AES mode compatibility.

This patch extends mapping table to optional keycount and
implements generic multi-key capability.

With more keys defined the <key> string is divided into
several <keycount> sections and these are used for tfms.

The tfm is used according to sector offset
(sector 0->tfm[0], sector 1->tfm[1], sector N->tfm[N modulo keycount])
(only power of two values supported for keycount here).

Because of tfms per-cpu allocation, this mode can be take
a lot of memory on large smp systems.

Signed-off-by: Milan Broz <mbroz@redhat.com>
Signed-off-by: Alasdair G Kergon <agk@redhat.com>
Cc: Max Vozeler <max@hinterhof.net>
Documentation/device-mapper/dm-crypt.txt
drivers/md/dm-crypt.c