msm-4.14/Documentation
Ondrej Kozina c538f6ec9f dm crypt: add ability to use keys from the kernel key retention service
The kernel key service is a generic way to store keys for the use of
other subsystems. Currently there is no way to use kernel keys in dm-crypt.
This patch aims to fix that. Instead of key userspace may pass a key
description with preceding ':'. So message that constructs encryption
mapping now looks like this:

  <cipher> [<key>|:<key_string>] <iv_offset> <dev_path> <start> [<#opt_params> <opt_params>]

where <key_string> is in format: <key_size>:<key_type>:<key_description>

Currently we only support two elementary key types: 'user' and 'logon'.
Keys may be loaded in dm-crypt either via <key_string> or using
classical method and pass the key in hex representation directly.

dm-crypt device initialised with a key passed in hex representation may be
replaced with key passed in key_string format and vice versa.

(Based on original work by Andrey Ryabinin)

Signed-off-by: Ondrej Kozina <okozina@redhat.com>
Reviewed-by: David Howells <dhowells@redhat.com>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
2016-12-08 14:13:09 -05:00
..
2016-11-11 16:48:49 -08:00
2016-10-14 15:17:12 -07:00
2016-10-03 08:58:35 -07:00
2016-05-31 16:41:55 +08:00
2016-11-11 16:38:26 -08:00
2016-10-05 16:43:53 -03:00
2016-10-07 20:19:31 -07:00
2016-10-11 15:06:33 -07:00
2016-07-26 10:35:31 +02:00
2016-10-27 11:35:47 +02:00
2016-10-14 15:17:12 -07:00
2016-06-30 13:07:33 -06:00
2016-09-20 18:46:36 -06:00
2016-10-11 13:22:22 -07:00
2016-06-07 22:57:10 +02:00
2016-06-07 22:57:10 +02:00
2016-09-20 18:46:36 -06:00
2016-05-17 14:48:04 +02:00