kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: Add INTEGRITY volume type

Browse Source 
Keys of type PVSECRET-HMAC can be associated to volumes of volume type
'INTEGTRITY' or 'LUKS2'.

Volumes of type 'INTEGTRITY' are set up for standalone dm-integrity via
the 'integritysetup' tool. Volumes of type 'LUKS2' are setup for combined
encryption and integrity using the 'cryptsetup' tool using the integrity
option.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2024-03-11 11:39:53 +01:00
committed by Jan Höppner
parent d9eee82ab0
commit 0047fc162e
3 changed files with 92 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
zkey/zkey.1
+21 -12
View File
@@ -1384,9 +1384,10 @@ sector size is used.
This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP.
Possible values are \fBplain\fP and \fBluks2\fP. If omitted, \fBluks2\fP is
used.
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys. If omitted,
\fBluks2\fP is used for AES keys, and \fBintegrity\fP for HMAC keys.
This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-K ", " \-\-key\-type\~\fItype\fP
@@ -1557,8 +1558,9 @@ This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP. If
omitted, \fBluks2\fP is used.
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys. If omitted,
\fBluks2\fP is used for AES keys, and \fBintegrity\fP for HMAC keys.
This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-\-gen\-dummy\-passphrase
@@ -1624,8 +1626,9 @@ This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP. Only keys
with the specified volume type are listed.
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys.
Only keys with the specified volume type are listed.
This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-K ", " \-\-key\-type\~\fItype\fP
@@ -1725,7 +1728,8 @@ This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP.
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys.
This option is only used for secure keys contained in the secure key repository.
.TP
.BR \-\-gen\-dummy\-passphrase
@@ -2049,7 +2053,8 @@ When wildcards are used you must quote the value.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP. Only keys
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys. Only keys
with the specified volume type are listed.
.
.
@@ -2081,7 +2086,8 @@ When wildcards are used you must quote the value.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP. Only keys
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys. Only keys
with the specified volume type are imported.
.TP
.BR \-q ", " \-\-batch\-mode
@@ -2117,7 +2123,8 @@ When wildcards are used you must quote the value.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP. Only keys
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys. Only keys
with the specified volume type are refreshed.
.TP
.BR \-K ", " \-\-key\-type\~\fItype\fP
@@ -2228,7 +2235,9 @@ bytes. If omitted, the system default sector size is used.
.TP
.BR \-t ", " \-\-volume\-type\~\fItype\fP
Specifies the volume type of the associated volumes used with \fBdm\-crypt\fP or
\fBdm\-integrity\fP. Possible values are \fBplain\fP and \fBluks2\fP. If
\fBdm\-integrity\fP. Possible values for AES keys are \fBplain\fP and
\fBluks2\fP, and \fBintegrity\fP and \fBluks2\fP for HMAC keys. If omitted,
\fBluks2\fP is used for AES keys, and \fBintegrity\fP for HMAC keys. If
omitted, \fBluks2\fP is used.
.TP
.BR \-\-gen\-dummy\-passphrase