Offloading storage encryption operations

One or more non-transitory machine-readable storage media having program code for storing an unencrypted data object in an encrypted storage area stored therein, the program code to:

• in response to indication of a sparse file stored in the encrypted storage area, the unencrypted data object, and a host,
• retrieve an encryption key associated with the host, wherein the encrypted storage area was previously encrypted using the encryption key;
• determine block addresses for the sparse file in the encrypted storage area;
• retrieve and encrypt the unencrypted data object based, at least in part, on the encryption key;
• write the encrypted data object to the block addresses of the sparse file in a clone of the encrypted storage area;
• and
• move the encrypted data object from the clone into the encrypted storage area.

An apparatus comprising:

• a processor;
• and
• a machine-readable medium having program code executable by the processor to cause the apparatus to,
• in response to indication of a sparse file stored in an encrypted storage area, an unencrypted data object, and a host,
• retrieve an encryption key associated with the host, wherein the encrypted storage area was previously encrypted using the encryption key;
• determine block addresses for the sparse file in the encrypted storage area;
• retrieve and encrypt the unencrypted data object based, at least in part, on the encryption key;
• write the encrypted data object to the block addresses of the sparse file in a clone of the encrypted storage area;
• and
• move the encrypted data object from the clone into the encrypted storage area.