Changes in dm-inlinecrypt.c

9611c0ce215a66770ccbe5c126bf57ba8c31bcad - Merge commit '6beaec3aee9852438b89e4d7891caf5e84d45851' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-current

Fri, 19 Jun 2026 10:50:17 +0200

Merge commit '6beaec3aee9852438b89e4d7891caf5e84d45851' of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux into gpio/for-currentThis pulls in the merge commit for MFD updates for v7.2. The PR containsa build-time dependency of one of the GPIO commits that will follow. List of files: /linux/drivers/md/dm-inlinecrypt.c

b1cbabe84ca1381a004fb91ee1791a1a53bce44e - Merge tag 'for-7.2/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

Tue, 16 Jun 2026 09:50:54 +0200

Merge tag 'for-7.2/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dmPull device mapper updates from Mikulas Patocka: - small cleanups in dm-vdo, dm-raid, dm-cache, dm-zoned-metadata - rework of dm-ima - introduce dm-inlinecrypt - fix wrong return value in dm-ioctl - fix rcu stall when polling* tag 'for-7.2/dm-changes' of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm: dm-zoned-metadata: Use strscpy() to copy device name dm cache: make smq background work limit configurable dm-inlinecrypt: add support for hardware-wrapped keys dm: limit target bio polling to one shot dm-ioctl: report an error if a device has no table dm: add documentation for dm-inlinecrypt target dm-inlinecrypt: add target for inline block device encryption block: export blk-crypto symbols required by dm-inlinecrypt dm-ima: use active table's size if available dm-ima: Fail more gracefully in dm_ima_measure_on_* dm-ima: Handle race between rename and table swap dm-ima: Fix issues with dm_ima_measure_on_device_rename dm-ima: remove new_map from dm_ima_measure_on_device_clear dm-ima: Fix UAF errors and measuring incorrect context dm-ima: don't copy the active table to the inactive table dm-ima: Remove status_flags from dm_ima_measure_on_table_load() dm-ima: remove broken last_target_measured logic dm-ima: remove dm_ima_reset_data() dm-raid: only requeue bios when dm is suspending dm vdo: use get_random_u32() where appropriate List of files: /linux/drivers/md/dm-inlinecrypt.c

f9f57971da38afbcfa82a9502fb3eb5f1f100e73 - dm-inlinecrypt: add support for hardware-wrapped keys

Mon, 25 May 2026 14:13:48 +0200

dm-inlinecrypt: add support for hardware-wrapped keysAdd support for hardware-wrapped encryption keys to thedm-inlinecrypt target.Introduce a new optional argument to indicatewhether the provided key is a raw key or a hardware-wrappedkey. Based on this flag, the appropriate blk-crypto key typeis selected when initializing the key.This allows dm-inlinecrypt to work with hardware that requireskeys to be wrapped and managed by the underlying inlineencryption engine.Update the target argument parsing accordingly and pass thekey type to blk_crypto_init_key(). Documentation is alsoupdated to reflect the new parameter and usage.Signed-off-by: Linlin Zhang Signed-off-by: Mikulas Patocka Fixes: e7f57d2c47e2 ("dm-inlinecrypt: add target for inline block device encryption") List of files: /linux/drivers/md/dm-inlinecrypt.c

e7f57d2c47e265ef64e1dab84fc8f70dae2dd150 - dm-inlinecrypt: add target for inline block device encryption

Thu, 30 Apr 2026 11:52:43 +0200

dm-inlinecrypt: add target for inline block device encryptionAdd a new device-mapper target "dm-inlinecrypt" that is similar todm-crypt but uses the blk-crypto API instead of the regular crypto API.This allows it to take advantage of inline encryption hardware such asthat commonly built into UFS host controllers.The table syntax matches dm-crypt's, but for now only a stripped-downset of parameters is supported. For example, for now AES-256-XTS is theonly supported cipher.dm-inlinecrypt is based on Android's dm-default-key with thecontroversial passthrough support removed. Note that due to the removalof passthrough support, use of dm-inlinecrypt in combination withfscrypt causes double encryption of file contents (similar to dm-crypt +fscrypt), with the fscrypt layer not being able to use the inlineencryption hardware. This makes dm-inlinecrypt unusable on systems suchas Android that use fscrypt and where a more optimized approach isneeded. It is however suitable as a replacement for dm-crypt.dm-inlinecrypt supports both keyring key and hex key, the former avoidsthe key to be exposed in dm-table message. Similar to dm-default-key inAndroid, it will fallabck to the software block crypto once the inlinecrypto hardware cannot support the expected cipher.Test:dmsetup create inlinecrypt_logon --table "0 `blockdev --getsz $1` \inlinecrypt aes-xts-plain64 :64:logon:fde:dminlinecrypt_test_key 0 $1 0"Signed-off-by: Eric Biggers Signed-off-by: Linlin Zhang Signed-off-by: Mikulas Patocka List of files: /linux/drivers/md/dm-inlinecrypt.c