The encryption of data at rest is increasingly mandatory in a wide range of
settings from mobile devices to data centers. Linux has supported
encryption at both the filesystem and block-storage layers for some time,
but that support comes with a cost: either the CPU must encrypt and decrypt vast
amounts of data moving to and from persistent storage or it must
orchestrate offloading that work to a separate device. It was
thus only a
matter of time before ways were found to offload that overhead to the
storage hardware itself. Satya Tangirala’s inline
encryption patch set is intended to enable the kernel to take advantage
of this hardware in a general manner.

Source: LWN.net – [$] Inline encryption for filesystems