search

raspberrypi / linux

Kernel source tree for Raspberry Pi-provided kernel builds. Issues unrelated to the linux kernel should be posted on the community forum at https://forums.raspberrypi.com/
Other
11.21k stars 5.03k forks source link

Kernel doesn't contain Twofish modules #5258

Open JackSabbath opened 4 years ago

JackSabbath commented 4 years ago

I noticed that the Kernel currently doesn't support twofish en-/decryption. So I'm asking right now if you would enable the flags for that.

I think it's an extremely important feature, because Twofish is actually the best performing symmetric encryption algorithm on armhf and arm64. It even beats AES significantly. I benchmarked it using veracrypt on both architectures and multiple devices.

A current workaround is to use veracrypt with -m=nokernelcrypto or to use AES encryption. Both imply a serious performance loss.

Note that this affects pretty much any application that tries to mount encrypted content via LUKS, not just veracrypt.

pelwell commented 1 year ago

That seems reasonable - see commit https://github.com/raspberrypi/linux/commit/3df7000be054476a4caab5c11b0d30ef76af7108. The modules will appear in future kernel builds.