zkey-kmip: Generate keys in the KMIP server and retrieve them

Browse Source

Allow to generate a new AES key at the KMIP server, and retrieved it.
Keys are always retrieved in wrapped format, wrapped by the public RSA
wrapping key used by the KMIP plugin. The KMIP plugin can then unwrap
the retrieved key with its secure private RSA key, and can then import
the retrieved AES key into the zkey repository as secure key. That way,
the retrieved AES key is never in clear, once it leaves the KMIP server.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

...

This commit is contained in:

Ingo Franzki

2021-06-01 14:11:31 +02:00

committed by Jan Höppner

parent 41ddd35bc1

commit 4eab80ef44

1 changed files with 1027 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1028

zkey/kmip/zkey-kmip.c

File diff suppressed because it is too large Load Diff