Hacker News Reader

What about having a way to run the same crypto code but in userspace? Or perhaps turn it into a library that can be used from userspace.

For encrypted disks, you've now got high-performance data shuffling between userspace and kernel space - a massive new attack surface