Skip to content

Commit 4195255

Browse files
committed
fscrypt: add additional documentation for SM4 support
Add a paragraph about SM4, like there is for the other modes. Signed-off-by: Eric Biggers <[email protected]> Reviewed-by: Tianjia Zhang <[email protected]> Link: https://lore.kernel.org/r/[email protected]
1 parent f8b435f commit 4195255

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

Documentation/filesystems/fscrypt.rst

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -370,6 +370,12 @@ CONFIG_CRYPTO_HCTR2 must be enabled. Also, fast implementations of XCTR and
370370
POLYVAL should be enabled, e.g. CRYPTO_POLYVAL_ARM64_CE and
371371
CRYPTO_AES_ARM64_CE_BLK for ARM64.
372372

373+
SM4 is a Chinese block cipher that is an alternative to AES. It has
374+
not seen as much security review as AES, and it only has a 128-bit key
375+
size. It may be useful in cases where its use is mandated.
376+
Otherwise, it should not be used. For SM4 support to be available, it
377+
also needs to be enabled in the kernel crypto API.
378+
373379
New encryption modes can be added relatively easily, without changes
374380
to individual filesystems. However, authenticated encryption (AE)
375381
modes are not currently supported because of the difficulty of dealing

0 commit comments

Comments
 (0)