# Storage encryption

Storage encryption enhances security by supporting the transparent encryption of files and directories.

The Qualcomm Linux supports storage encryption with the [Inline crypto engine](https://docs.qualcomm.com/doc/80-70018-11/topic/crypto-core.html#section-crypto-inline-crypto-engine-label) and a hardware-wrapped key. It provides better efficiency and enhanced key protection.

The storage encryption feature allows:

- Provision of standard keys ranging from 32 bytes to 64 bytes for content encryption
- Encryption of filenames and file content with separate keys
- Generation of 32‑byte key identifiers

The Qualcomm universal flash storage (UFS) driver is added to support the `fscrypt` API.

Note

The embedded multimedia card (eMMC) support will be provided in a future release.

For more information on the `fscrypt` API, see [Filesystem-level encryption (fscrypt) Linux kernel documentation](https://www.kernel.org/doc/Documentation/filesystems/fscrypt.rst).

For related kernel documentation, see the following files:

- [Inline encryption](https://www.kernel.org/doc/Documentation/block/inline-encryption.rst)
- [I/O control (IOCTL) support for storage encryption](https://www.kernel.org/doc/Documentation/userspace-api/ioctl/ioctl-number.rst)

You can invoke the storage encryption functionality using the open-source [fscryptctl](https://github.com/google/fscryptctl) tool.

## Next steps

- To learn about the next security feature, see [SMC invoke](https://docs.qualcomm.com/doc/80-70018-11/topic/smcinvoke.html#smcinvoke).
- To learn about TrustZone and security framework, see [Security architecture](https://docs.qualcomm.com/doc/80-70018-11/topic/architecture.html#architecture).
- To learn about APIs that can be used to interact with Linux and hardware, see [Security APIs](https://docs.qualcomm.com/doc/80-70018-11/topic/interfaces.html#interfaces).

Last Published: Apr 10, 2025

[Previous Topic
Storage security](https://docs.qualcomm.com/bundle/publicresource/80-70018-11/topics/secure-file-system.md) [Next Topic
SMC invoke](https://docs.qualcomm.com/bundle/publicresource/80-70018-11/topics/smcinvoke.md)