ext4 crypto: add padding to filenames before encrypting
authorTheodore Ts'o <tytso@mit.edu>
Fri, 1 May 2015 20:56:50 +0000 (16:56 -0400)
committerTheodore Ts'o <tytso@mit.edu>
Fri, 1 May 2015 20:56:50 +0000 (16:56 -0400)
commita44cd7a05496d60fd2ba8cca080e3db8f481549b
treedd8d05d845817e4a429804d8ffe09dd68b6881e6
parent5de0b4d0cd153c471640b13aae6ae6d18d0a4603
ext4 crypto: add padding to filenames before encrypting

This obscures the length of the filenames, to decrease the amount of
information leakage.  By default, we pad the filenames to the next 4
byte boundaries.  This costs nothing, since the directory entries are
aligned to 4 byte boundaries anyway.  Filenames can also be padded to
8, 16, or 32 bytes, which will consume more directory space.

Change-Id: Ibb7a0fb76d2c48e2061240a709358ff40b14f322
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
fs/ext4/crypto_fname.c
fs/ext4/crypto_key.c
fs/ext4/crypto_policy.c
fs/ext4/ext4.h
fs/ext4/ext4_crypto.h