Ticket #55 (closed enhancement: implemented)

Opened 19 months ago

Last modified 7 months ago

Support AESNI for LUKS

Reported by: joanna Owned by: marmarek
Priority: minor Milestone: Release 1 Beta 2
Component: kernel-dom0 Keywords:
Cc:

Description

For some reason currently one needs to pass rdblacklist=aesni-intel to kernel if one has Core i5/i7 processor with AESNI instruction, and obviously cannot take advantage of the h/w accelerated disk encryption in LUKS. This should be investigated.

Change History

comment:1 Changed 18 months ago by joanna

  • Type changed from defect to enhancement

comment:2 Changed 13 months ago by joanna

  • Priority changed from major to minor
  • Milestone changed from Release 1 Beta 1 to Release 1 Beta 2

The expectation is that this will be automatically solved when we update kernel to a newer one. Moving temp to Beta 2.

comment:3 Changed 7 months ago by joanna

  • Status changed from new to assigned

comment:4 Changed 7 months ago by joanna

I got it working on my core i5 system -- all that was required was to add some modules to initramfs, specifically the following worked for me:

dracut --force --add-drivers xts aesni-intel aes-x86_64 crc32c-intel fpu ghash-clmulni-intel salsa20-x86_64 twofish-x86_64  /boot/initramfs-2.6.38.3-1-aesni.xenlinux.qubes.x86_64.img 2.6.38.3-1.xenlinux.qubes.x86_64

I will update the kernel repo to do the above automatically.

comment:5 Changed 7 months ago by marmarek

  • Owner changed from joanna to marmarek
  • Status changed from assigned to accepted

comment:6 Changed 7 months ago by marmarek

  • Status changed from accepted to closed
  • Resolution set to implemented

 http://git.qubes-os.org/gitweb/?p=marmarek/kernel.git;a=commit;h=e20f891181f01660c3aa704687ecae72eb6c3492

Note: See TracTickets for help on using tickets.