• Hannes Reinecke's avatar
    nvme: implement In-Band authentication · f50fff73
    Hannes Reinecke authored
    Implement NVMe-oF In-Band authentication according to NVMe TPAR 8006.
    This patch adds two new fabric options 'dhchap_secret' to specify the
    pre-shared key (in ASCII respresentation according to NVMe 2.0 section
    8.13.5.8 'Secret representation') and 'dhchap_ctrl_secret' to specify
    the pre-shared controller key for bi-directional authentication of both
    the host and the controller.
    Re-authentication can be triggered by writing the PSK into the new
    controller sysfs attribute 'dhchap_secret' or 'dhchap_ctrl_secret'.
    Signed-off-by: default avatarHannes Reinecke <hare@suse.de>
    Reviewed-by: default avatarSagi Grimberg <sagi@grimberg.me>
    Signed-off-by: default avatarChristoph Hellwig <hch@lst.de>
    [axboe: fold in clang build fix]
    Signed-off-by: default avatarJens Axboe <axboe@kernel.dk>
    f50fff73
auth.c 22.5 KB