• Ingo Franzki's avatar
    s390/pkey: Add sysfs attributes to emit AES CIPHER key blobs · f71fee27
    Ingo Franzki authored
    Now that the pkey kernel module also supports CCA AES CIPHER keys:
    Add binary read-only sysfs attributes for the pkey module
    that can be used to read random CCA AES CIPHER secure keys from,
    similar to the already existing sysfs attributes for AES DATA and
    random protected keys. Keys are read from these attributes using
    a cat-like interface.
    
    A typical use case for those keys is to encrypt a swap device
    using the paes cipher. During processing of /etc/crypttab, the
    CCA random AES CIPHER secure key to encrypt the swap device is
    read from one of the attributes.
    
    The following attributes are added:
      ccacipher/ccacipher_aes_128
      ccacipher/ccacipher_aes_192
      ccacipher/ccacipher_aes_256
      ccacipher/ccacipher_aes_128_xts
      ccacipher/ccacipher_aes_256_xts
    Each attribute emits a secure key blob for the corresponding
    key size and cipher mode.
    Signed-off-by: default avatarIngo Franzki <ifranzki@linux.ibm.com>
    Reviewed-by: default avatarHarald Freudenberger <freude@linux.ibm.com>
    Signed-off-by: default avatarVasily Gorbik <gor@linux.ibm.com>
    f71fee27
pkey_api.c 38.1 KB