zkey: Adjust the error message when calculating the KVP fails

The 'paes' and 'phmac' kernel ciphers and the respective kernel modules
are no longer used for calculating the key verification pattern. Instead,
the 'pkey' kernel module and its sub modules is used now.

In case the 'pkey' kernel module is not available, an appropriate error
message is already printed by open_pkey_device() when opening the device.

Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2026-06-08 13:32:43 +02:00
committed by Jan Höppner
parent 7fffdcfe8c
commit 584e785f5c
4 changed files with 0 additions and 56 deletions
-6
View File
@@ -3451,12 +3451,6 @@ int refresh_kms_key(struct kms_info *kms_info, struct properties *key_props,
if (rc != 0) {
warnx("Failed to generate the verification pattern: %s",
strerror(-rc));
warnx("Make sure that kernel module '%s' is loaded and "
"that the '%s' cipher is available",
is_aes_key(key_blob, key_blob_size) ?
"paes_s390" : "phmac_s390",
is_aes_key(key_blob, key_blob_size) ?
"paes" : "phmac");
goto out;
}