encrypted-keys: add key format support
authorRoberto Sassu <roberto.sassu@polito.it>
Mon, 27 Jun 2011 11:45:42 +0000 (13:45 +0200)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Mon, 27 Jun 2011 13:10:45 +0000 (09:10 -0400)
commit4e561d388feff18e4b798cef6a1a84a2cc7f20c2
tree9208588c7d0e5e75766dd2c98e960840fdc8681e
parent7103dff0e598cd634767f17a2958302c515700ca
encrypted-keys: add key format support

This patch introduces a new parameter, called 'format', that defines the
format of data stored by encrypted keys. The 'default' format identifies
encrypted keys containing only the symmetric key, while other formats can
be defined to support additional information. The 'format' parameter is
written in the datablob produced by commands 'keyctl print' or
'keyctl pipe' and is integrity protected by the HMAC.

Signed-off-by: Roberto Sassu <roberto.sassu@polito.it>
Acked-by: Gianluca Ramunno <ramunno@polito.it>
Acked-by: David Howells <dhowells@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Documentation/security/keys-trusted-encrypted.txt
include/keys/encrypted-type.h
security/keys/encrypted.c