Get the latest tech news
Linux 6.16 Upstreams Support For Hardware-Wrapped Encryption Keys
Google engineer Eric Biggers took time away from all his impressive crypto performance optimizations to the Linux kernel for modern Intel and AMD CPUs to spend time getting support for hardware-wrapped inline encryption keys into the mainline kernel
Eric Biggers explained in the FSCRYPT pull request for Linux 6.16 this new hardware-wrapped inline encryption keys feature: Other fscrypt operations such as filenames encryption continue to be done by the kernel, using the "software secret" which the hardware derives. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software.
Or read this on Phoronix