Support AESNI for LUKS

[marmarek]

Reported by joanna on 6 Jul 2010 11:07 UTC
For some reason currently one needs to pass rdblacklist=aesni-intel to kernel if one has Core i5/i7 processor with AESNI instruction, and obviously cannot take advantage of the h/w accelerated disk encryption in LUKS. This should be investigated.

Migrated-From: https://wiki.qubes-os.org/ticket/55

[marmarek]

Modified by joanna on 5 Aug 2010 21:18 UTC

[marmarek]

Modified by joanna on 5 Aug 2010 21:18 UTC

[marmarek]

Comment by joanna on 24 Jan 2011 12:08 UTC
The expectation is that this will be automatically solved when we update kernel to a newer one. Moving temp to Beta 2.

[marmarek]

Comment by joanna on 24 Jan 2011 12:08 UTC
The expectation is that this will be automatically solved when we update kernel to a newer one. Moving temp to Beta 2.

[marmarek]

Modified by joanna on 1 Jul 2011 16:14 UTC

[marmarek]

Modified by joanna on 1 Jul 2011 16:14 UTC

[marmarek]

Comment by joanna on 1 Jul 2011 16:15 UTC
I got it working on my core i5 system -- all that was required was to add some modules to initramfs, specifically the following worked for me:

dracut --force --add-drivers xts aesni-intel aes-x86_64 crc32c-intel fpu ghash-clmulni-intel salsa20-x86_64 twofish-x86_64  /boot/initramfs-2.6.38.3-1-aesni.xenlinux.qubes.x86_64.img 2.6.38.3-1.xenlinux.qubes.x86_64

I will update the kernel repo to do the above automatically.

[marmarek]

Comment by joanna on 1 Jul 2011 16:15 UTC
I got it working on my core i5 system -- all that was required was to add some modules to initramfs, specifically the following worked for me:

dracut --force --add-drivers xts aesni-intel aes-x86_64 crc32c-intel fpu ghash-clmulni-intel salsa20-x86_64 twofish-x86_64  /boot/initramfs-2.6.38.3-1-aesni.xenlinux.qubes.x86_64.img 2.6.38.3-1.xenlinux.qubes.x86_64

I will update the kernel repo to do the above automatically.

[marmarek]

Modified by marmarek on 13 Jul 2011 19:58 UTC

[marmarek]

Modified by marmarek on 13 Jul 2011 19:58 UTC

[marmarek]

Comment by marmarek on 14 Jul 2011 00:06 UTC
http://git.qubes-os.org/gitweb/?p=marmarek/kernel.git;a=commit;h=e20f891181f01660c3aa704687ecae72eb6c3492

[marmarek]

Comment by marmarek on 14 Jul 2011 00:06 UTC
http://git.qubes-os.org/gitweb/?p=marmarek/kernel.git;a=commit;h=e20f891181f01660c3aa704687ecae72eb6c3492