kata-containers/s390-tools
1
0
Fork 0
mirror of https://github.com/ibm-s390-linux/s390-tools.git synced 2026-08-05 02:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

zkey: Do not check secure key for C-XLATE flag

Browse Source 
The C-XLATE flag determines if the secure key can be used with the
CCA Cipher Text Translate2 verb. Cipher Text Translate2 deciphers
encrypted data under one key and re-enciphers it under another key
without having the data appear in the clear outside the cryptographic
coprocessor. Since this is not a security risk, the check can be
removed.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
This commit is contained in:
Ingo Franzki
2020-07-17 11:41:27 +02:00
committed by Jan Höppner
parent 40e4b71159
commit beb6a1d6fd
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
zkey/pkey.c
View File

@@ -1773,10 +1773,6 @@ int check_aes_cipher_key(const u8 *key, size_t key_size)
"decryption\n");
mismatch = true;
}
if (cipherkey->kuf1 & 0x2000) {
printf("INFO: The secure key can be used for data translate\n");
mismatch = true;
}
if (cipherkey->kuf1 & 0x1000) {
printf("WARNING: The secure key can only be used in UDXs\n");
mismatch = true;