Dear gurus:

I'd like to modify the kernel to load a encrypted initrd. While
loading the initial ramdisk, kernel reads secret key from somewhere
else and decrypts initrd, and then continues the boot process.
However, I met a problem.

Since there are crypto libraries reside in kernel, I believe that's
the best resource for me to implement this mechanism. At first I
followed the interfaces found in crypto/api.c, but found it is loads
crypto-algorithms from modules. Even after I configured an algo as
build-in module (say, aes), I always failed at its initialization
stage. (crypto_alloc_blkcipher returns error)

Please give me suggestions. Am I on a right course?

-- 
Best regards,
Hong-Bin
blog: http://furseal.wordpress.com
msn: benjamin@benjamin.idv.tw