[Request] Hardware Encryption Support

archlinux / archinstall

Arch Linux installer - guided, templates etc.

GNU General Public License v3.0

6.04k stars 522 forks source link

[Request] Hardware Encryption Support #2589

Open UtilFunction opened 1 month ago

UtilFunction commented 1 month ago

Cryptsetup has been supporting hardware encryption with TCG Opal-compliant drives since version 2.7.0. The forthcoming version 41 of the Fedora installer will also support this functionality. It is possible to utilise either hardware encryption only, or in conjunction with software encryption by incorporating a straightforward flag.

It would be nice to have this option within archinstall.

Torxed commented 1 month ago

Would this be something different to the HSM support we've had since v2.5.0?

UtilFunction commented 1 month ago

Yes, these two are not related. HSMs basically only deal with authentication and the handling of keys. Self encrypting drives perform encryption autonomously and hence without overhead on the host's CPU which is considerable even with AES-NI.