FSCRYPT is the Linux file-system encryption framework for supporting per-directory, transparent encryption. FSCRYPT so far is used by the likes of EXT4, F2FS, and CephFS. For Linux 7.3 there is an important clean-up to the FSCRYPT code to simplify it while also opening the door for new features moving forward into future kernel versions...

SUSE engineer David Sterba submitted the Btrfs pull request for Linux 6.19 on Friday, ahead of the Linux 6.18 stable kernel release that took place on Sunday. This copy-on-write file-system continues seeing some enticing feature work and other improvements for this next version of the Linux kernel...

FSCRYPT is the Linux file-system encryption framework for supporting per-directory, transparent encryption

Intel's accelerator efforts in recent generations of Xeon processors have been challenging to say the least. From limited software support and configuration obstacles to some current-generation accelerators not being safe for VM use due to security issues to having to deal with higher latency and other nuances if wanting to achieve decent performance. One of the Linux kernel users of Intel's QuickAssist Technology "QAT" accelerators has been the FSCRYPT code for native file encryption support. But the Linux kernel with the FSCRYPT usage is now demoting the Intel QAT accelerator support along with other problem-causing accelerator drivers...

Blog com notícias sobre, Linux, Android, Segurança , etc

Huawei engineer Zhang Yi posted a set of nine patches today for enabling large folio support for regular files with the EXT4 file-system. These patches enable large folios for EXT4 on regular files except when using FSVERITY, FSCRYPT, or the journaled data mode. Long story short, these large folio patches can deliver some nice performance gains for both reads and writes...

Intel's accelerator efforts in recent generations of Xeon processors have been challenging to say the least. From limited software support and configuration obstacles to some current-generation accelerators not being safe for VM use due to security issues to having to deal with higher latency and other nuances if wanting to achieve decent performance. One of the Linux kernel users of Intel's QuickAssist Technology "QAT" accelerators has been the FSCRYPT code for native file encryption support. But the Linux kernel with the FSCRYPT usage is now demoting the Intel QAT accelerator support along with other problem-causing accelerator drivers...

Google engineer Eric Biggers took time away from all his impressive crypto performance optimizations to the Linux kernel for modern Intel and AMD CPUs to spend time getting support for hardware-wrapped inline encryption keys into the mainline kernel. Google's Android kernel has been carrying this functionality for several years to help enhance security and will now be found in the mainline kernel too for capable platforms...

A few days ago the Intel QuickAssist "QAT" accelerators were demoted by FSCRYPT in the Linux 6.17 development code due to being slow and bug prone with AVX-512 showing to be much faster than leveraging the QAT accelerators in this file encryption framework. With the Linux 6.17 crypto subsystem is a second separate demotion to Intel's QAT support for kernel use...

A few days ago the Intel QuickAssist "QAT" accelerators were demoted by FSCRYPT in the Linux 6.17 development code due to being slow and bug prone with AVX-512 showing to be much faster than leveraging the QAT accelerators in this file encryption framework. With the Linux 6.17 crypto subsystem is a second separate demotion to Intel's QAT support for kernel use...

We haven't heard much about eCryptfs in recent years for that stackable in-tree Linux file-system providing per-directory encryption support. The FSCRYPT framework has shown its strong capabilities in recent years with various file-systems, Canonical hasn't been pursuing its user home directory encryption like it did years ago for the Ubuntu desktop, and full disk encryption is the most secure approach for ensuring data security on your system. But to some surprise with Linux 7.0 there are the most patches to eCryptfs that we have seen in a while...

We haven't heard much about eCryptfs in recent years for that stackable in-tree Linux file-system providing per-directory encryption support. The FSCRYPT framework has shown its strong capabilities in recent years with various file-systems, Canonical hasn't been pursuing its user home directory encryption like it did years ago for the Ubuntu desktop, and full disk encryption is the most secure approach for ensuring data security on your system. But to some surprise with Linux 7.0 there are the most patches to eCryptfs that we have seen in a while...

8️⃣ Here's the 8th post highlighting key new features of the upcoming v262 release of systemd. #systemd262 #systemd systemd-homed provides encrypted home directories to users, whose encryption key is directly derived from the login credentials. It has multiple storage backends: a LUKS based backend (that provides best security, since it protects both contents and all metadata of the user's files) is the most prominent one, but since day one there has also been an fscrypt based one.

FSCRYPT is the Linux file-system encryption framework for supporting per-directory, transparent encryption. FSCRYPT so far is used by the likes of EXT4, F2FS, and CephFS. For Linux 7.3 there is an important clean-up to the FSCRYPT code to simplify it while also opening the door for new features moving forward into future kernel versions...

FSCRYPT is the Linux file-system encryption framework for supporting per-directory, transparent encryption. FSCRYPT so far is used by the likes of EXT4, F2FS, and CephFS. For Linux 7.3 there is an…

FSCRYPT is the Linux file-system encryption framework for supporting per-directory, transparent encryption. FSCRYPT so far is used by the likes of EXT4, F2FS, and CephFS. For Linux 7.3 there is an important clean-up to the FSCRYPT code to simplify it while also opening the door for new features moving forward into future kernel versions...

Blog com notícias sobre, Linux, Android, Segurança , etc