Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S262154AbUCEBT2 (ORCPT ); Thu, 4 Mar 2004 20:19:28 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262155AbUCEBT2 (ORCPT ); Thu, 4 Mar 2004 20:19:28 -0500 Received: from twinlark.arctic.org ([168.75.98.6]:17602 "EHLO twinlark.arctic.org") by vger.kernel.org with ESMTP id S262154AbUCEBT1 (ORCPT ); Thu, 4 Mar 2004 20:19:27 -0500 Date: Thu, 4 Mar 2004 17:19:26 -0800 (PST) From: dean gaudet To: Jean-Luc Cooke cc: James Morris , Christophe Saout , Carl-Daniel Hailfinger , Linux Kernel Mailing List , Andrew Morton Subject: Re: dm-crypt, new IV and standards In-Reply-To: <20040304132430.GA8213@certainkey.com> Message-ID: References: <20040220172237.GA9918@certainkey.com> <20040221164821.GA14723@certainkey.com> <20040303150647.GC1586@certainkey.com> <20040304132430.GA8213@certainkey.com> X-comment: visit http://arctic.org/~dean/legal for information regarding copyright and disclaimer. MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 761 Lines: 17 On Thu, 4 Mar 2004, Jean-Luc Cooke wrote: > recommend using a MAC with CTR. (Why still have CTR? Unlike CBC, you can > compute the N+1-th block without needing to know the output from the N-th > block, so there is the possibility for very high parallelizum). for disk crypto there are other opportunities for parallelism using bitslicing to encrypt/decrypt multiple blocks in parallel (for example see ). there's a latency/throughput tradeoff though... -dean - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/