[PATCH 0/5] crypto: add IV generation templates

From: Xiongfeng Wang
Date: Wed Jul 18 2018 - 03:42:44 EST


Currently, the iv generation algorithms are implemented in dm-crypt.c.
This patchset moves these algorithms from the dm layer to the kernel
crypto layer by implementing them as template ciphers so they
can be implemented in hardware for performance. We modify the dm layer
to send a whole 'bio' rather than a sector at a time, so the dm layer
needs to called into the crypto layer less times. Each bio contains an
in memory representation of physically contiguous disk blocks. The dm
layer sets up a chained scatterlist of these blocks split into physically
contiguous segments in memory so that DMA can be performed.

This patchset is based on the patchset originally started by
Binoy Jayan <binoy.jayan@xxxxxxxxxx>
( crypto: Add IV generation algorithms
https://patchwork.kernel.org/patch/9803469/ )

I tested the performance of software implemented ciphers before and after
applying this patchset. The performance didn't change much except for
slight regression when writting. The detail information is as follows.

The command I used:
cryptsetup -y -c aes-xts-plain -s 256 --hash sha256 luksFormat /dev/sdd1
cryptsetup -y -c aes-cbc-essiv:sha256 -s 256 --hash sha256 luksFormat /dev/sdd1
cryptsetup -y -c aes-cbc-benbi -s 256 --hash sha256 luksFormat /dev/sdd1

cryptsetup luksOpen /dev/sdd1 crypt_fun
time dd if=/dev/mapper/crypt_fun of=/dev/null bs=1M count=500 iflag=direct
time dd if=/dev/zero of=/dev/mapper/crypt_fun bs=1M count=500 oflag=direct

Performance comparision:
--------------------------------------------------------
algorithms | before applying | after applying
--------------------------------------------------------
| read | write | read | write
--------------------------------------------------------
aes-xts-plain | 145.34 | 145.09 | 145.89 | 144.2
--------------------------------------------------------
aes-cbc-essiv | 146.87 | 144.62 | 146.74 | 143.41
--------------------------------------------------------
aes-cbc-benbi | 146.03 | 144.74 | 146.77 | 144.46
--------------------------------------------------------

Xiongfeng Wang (5):
crypto: api - introduce API to (un)register a array of templates
crypto: ccm - use template array registering API to simplify the code
crypto: gcm - use template array registering API to simplify the code
crypto: Add IV generation templates
dm-crypt: modify dm-crypt to rely on IV generation templates

crypto/Kconfig | 7 +
crypto/Makefile | 1 +
crypto/algapi.c | 27 +
crypto/ccm.c | 82 +-
crypto/gcm.c | 76 +-
crypto/geniv.c | 2240 +++++++++++++++++++++++++++++++++++++++++++++++
drivers/md/Kconfig | 1 +
drivers/md/dm-crypt.c | 1697 ++++++++---------------------------
include/crypto/algapi.h | 2 +
include/crypto/geniv.h | 47 +
10 files changed, 2722 insertions(+), 1458 deletions(-)
create mode 100644 crypto/geniv.c
create mode 100644 include/crypto/geniv.h

--
1.7.12.4