[Espressobin support development efforts]

4 hours ago, ebin-dev said:

 

The 5Gbps Security Engine of the Espressoin is not CESA compatible. It needs a specific driver implemented by Bootlin in kernel 4.16:

 

 

Thanks for the correction. I don't remember where I read that it was CESA. An untrustworthy source certainly.

 

safeexecel is already compiled as a module. I will then try to make it works with my espresso ;)

 

[Espressobin support development efforts]

Hello,

 

First, thanks for your time in creating and managing armbian :)

 

It will be great if cryptsetup work "out of the box"  (without rebuilding your own kernel) (at least in devel ;)).

At the present time, I can't mount any encrypted partition because some options are missing in the kernel.

I think the kernel option "CONFIG_CRYPTO_USER_API_SKCIPHER" is needed.

The module dm_mod.ko is also needed but I can't find which option(s) creates it (it's the device mapper module).

 

 

It will be also great if we can try the CESA code since the option seems here (CONFIG_CRYPTO_DEV_MARVELL_CESA)  , so we can test it :)

 

I paste below the results of my simple tests.

 

Quote

root@espressobin:~# uname  -a
Linux espressobin 4.16.15-mvebu64 #152 SMP PREEMPT Tue Jun 12 01:48:50 UTC 2018 aarch64 aarch64 aarch64 GNU/Linux
root@espressobin:~# cryptsetup benchmark
# Tests are approximate using memory only (no storage IO).
PBKDF2-sha1       121362 iterations per second
PBKDF2-sha256      74898 iterations per second
PBKDF2-sha512      68337 iterations per second
PBKDF2-ripemd160  108683 iterations per second
PBKDF2-whirlpool   24380 iterations per second
Required kernel crypto interface not available.
Ensure you have algif_skcipher kernel module loaded.
root@espressobin:~# dd if=/dev/zero of=/run/test bs=1M count=10
10+0 records in
10+0 records out
10485760 bytes (10 MB, 10 MiB) copied, 0.0315174 s, 333 MB/s
root@espressobin:~# cryptsetup open --type plain /run/test test
Enter passphrase: 
Cannot initialize device-mapper. Is dm_mod kernel module loaded?
root@espressobin:~# cryptsetup luksFormat --type luks2 /run/test

WARNING!
========
This will overwrite data on /run/test irrevocably.

Are you sure? (Type uppercase yes): YES
Enter passphrase: 
Verify passphrase: 
Cannot initialize device-mapper. Is dm_mod kernel module loaded?