{"action":"created","issue":{"url":"https://api.github.com/repos/zfsonlinux/zfs/issues/494","labels_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/494/labels{/name}","comments_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/494/comments","events_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/494/events","html_url":"https://github.com/zfsonlinux/zfs/issues/494","id":2555322,"number":494,"title":"ZFS Crypto support","user":{"login":"FransUrbo","id":572706,"avatar_url":"https://avatars.githubusercontent.com/u/572706?v=3","gravatar_id":"","url":"https://api.github.com/users/FransUrbo","html_url":"https://github.com/FransUrbo","followers_url":"https://api.github.com/users/FransUrbo/followers","following_url":"https://api.github.com/users/FransUrbo/following{/other_user}","gists_url":"https://api.github.com/users/FransUrbo/gists{/gist_id}","starred_url":"https://api.github.com/users/FransUrbo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/FransUrbo/subscriptions","organizations_url":"https://api.github.com/users/FransUrbo/orgs","repos_url":"https://api.github.com/users/FransUrbo/repos","events_url":"https://api.github.com/users/FransUrbo/events{/privacy}","received_events_url":"https://api.github.com/users/FransUrbo/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/zfsonlinux/zfs/labels/Difficulty%20-%20Hard","name":"Difficulty - Hard","color":"207de5"},{"url":"https://api.github.com/repos/zfsonlinux/zfs/labels/Feature","name":"Feature","color":"02d7e1"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":43,"created_at":"2011-12-14T17:36:57Z","updated_at":"2015-08-24T04:51:11Z","closed_at":null,"body":"As of ZFS Pool Version 30, there is support for encryption. This part is unfortunatly closed source, so an opensource implementation would be required. That means it would probably not be compatible with the Solaris version 'but who cares' :).\r\n\r\nIllumos is apparently working on this at https://www.illumos.org/projects/zfs-crypto. Source repository can be found at https://bitbucket.org/buffyg/illumos-zfs-crypto. Unfortunatly there is no changes since the fork from illumos-gate. Should ZoL start thinking about this or should we just take the back seat?\r\n\r\nDon't know how big of a problem this would be, but 'copying' the way that LUKS (Linux Unified Key Setup) do it seems to be a good place to start."},"comment":{"url":"https://api.github.com/repos/zfsonlinux/zfs/issues/comments/134035051","html_url":"https://github.com/zfsonlinux/zfs/issues/494#issuecomment-134035051","issue_url":"https://api.github.com/repos/zfsonlinux/zfs/issues/494","id":134035051,"user":{"login":"ryao","id":1386373,"avatar_url":"https://avatars.githubusercontent.com/u/1386373?v=3","gravatar_id":"","url":"https://api.github.com/users/ryao","html_url":"https://github.com/ryao","followers_url":"https://api.github.com/users/ryao/followers","following_url":"https://api.github.com/users/ryao/following{/other_user}","gists_url":"https://api.github.com/users/ryao/gists{/gist_id}","starred_url":"https://api.github.com/users/ryao/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryao/subscriptions","organizations_url":"https://api.github.com/users/ryao/orgs","repos_url":"https://api.github.com/users/ryao/repos","events_url":"https://api.github.com/users/ryao/events{/privacy}","received_events_url":"https://api.github.com/users/ryao/received_events","type":"User","site_admin":false},"created_at":"2015-08-24T04:51:11Z","updated_at":"2015-08-24T04:51:11Z","body":"To elaborate on my previous comment, implementing this would require porting the Illumos kernel cryptographic library to a Linux kernel module so that we can include the sys/crypto/api.h header:\r\n\r\nhttps://github.com/illumos/illumos-gate/blob/master/usr/src/uts/common/sys/crypto/api.h\r\n\r\nThat code is also able to be built in userland, which we would need to preserve so that zdb and ztest would be able to link to it."}}