[LU-17138] Avoid poor performing crypto engines for client-side encryption

Related — Sat, 28 Oct 2023 01:09:05 +0000

Lustre client encryption relies on the llcrypt lib to carry out encryption/decryption. This lib leverages the kernel Crypto API to choose the crypto cipher to use. By default it looks for generic implementations of xts(aes), cts(cbc(aes)) and cbc(aes).

While this is fine most of the time, we might want to avoid using some cipher implementations that register under the generic name. For instance, if a cipher is provided by an external accelerator card, we might want to avoid it and prefer in-CPU engines.

Whamcloud Community JIRA

[LU-17138] Avoid poor performing crypto engines for client-side encryption