mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
44d6020774
To be able to calculate the key verification pattern of a key blob without the use of AF_ALG, the file descriptor of the /dev/pkey device needs to be passed through to all functions that might need to calculate the key verification pattern. Also make sure that all commands that might need to calculate the key verification pattern have 'need_pkey_device = 1' so that the device is opened. Reviewed-by: Finn Callies <fcallies@linux.ibm.com> Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
102 lines
2.9 KiB
C
102 lines
2.9 KiB
C
/*
|
|
* zkey - Generate, re-encipher, and validate secure keys
|
|
*
|
|
* This header file defines functions for the PV secrets support as well
|
|
* as the interface to the uv kernel module.
|
|
*
|
|
* Copyright IBM Corp. 2024
|
|
*
|
|
* s390-tools is free software; you can redistribute it and/or modify
|
|
* it under the terms of the MIT license. See LICENSE for details.
|
|
*/
|
|
|
|
#ifndef PVSECRETS_H
|
|
#define PVSECRETS_H
|
|
|
|
#include "lib/zt_common.h"
|
|
|
|
#include "pkey.h"
|
|
#include "keystore.h"
|
|
|
|
/*
|
|
* Definitions for the /dev/uv kernel module interface
|
|
*/
|
|
#define UVDEVICE "/dev/uv"
|
|
#define SYSFS_UV "firmware/uv"
|
|
#define SYSFS_UV_PV_GUEST "%s/prot_virt_guest"
|
|
#define SYSFS_UV_MAX_SECRETS "%s/query/max_retr_secrets"
|
|
|
|
struct uvio_ioctl_cb {
|
|
u32 flags;
|
|
u16 uv_rc; /* UV header rc value */
|
|
u16 uv_rrc; /* UV header rrc value */
|
|
void *argument_addr; /* Userspace address of uvio argument */
|
|
u32 argument_len;
|
|
u8 reserved14[0x40 - 0x14]; /* must be zero */
|
|
};
|
|
|
|
#define UVIO_IOCTL_LIST_SECRETS_NR 3
|
|
|
|
#define UVIO_TYPE_UVC 'u'
|
|
#define UVIO_IOCTL(nr) _IOWR(UVIO_TYPE_UVC, \
|
|
nr, struct uvio_ioctl_cb)
|
|
#define UVIO_IOCTL_LIST_SECRETS UVIO_IOCTL( \
|
|
UVIO_IOCTL_LIST_SECRETS_NR)
|
|
|
|
#define UVIO_RC_SUCCESS 0x0001
|
|
#define UVIO_RC_MORE_DATA 0x0100
|
|
|
|
#define UV_SECRET_TYPE_INVALID 0x00
|
|
#define UV_SECRET_TYPE_NULL 0x01
|
|
#define UV_SECRET_TYPE_AP_ASSOCIATION 0x02
|
|
#define UV_SECRET_TYPE_PLAIN_TEXT 0x03
|
|
#define UV_SECRET_TYPE_AES_128 0x04
|
|
#define UV_SECRET_TYPE_AES_192 0x05
|
|
#define UV_SECRET_TYPE_AES_256 0x06
|
|
#define UV_SECRET_TYPE_AES_XTS_128 0x07
|
|
#define UV_SECRET_TYPE_AES_XTS_256 0x08
|
|
#define UV_SECRET_TYPE_HMAC_SHA_256 0x09
|
|
#define UV_SECRET_TYPE_HMAC_SHA_512 0x0a
|
|
#define UV_SECRET_TYPE_ECDSA_P256 0x11
|
|
#define UV_SECRET_TYPE_ECDSA_P384 0x12
|
|
#define UV_SECRET_TYPE_ECDSA_P521 0x13
|
|
#define UV_SECRET_TYPE_EDDSA_ED25519 0x14
|
|
#define UV_SECRET_TYPE_EDDSA_ED448 0x15
|
|
|
|
#define UVIO_LIST_SECRETS_MAX_LEN 0x8000
|
|
|
|
struct uvio_list_secret_entry {
|
|
u16 secret_idx;
|
|
u16 secret_type;
|
|
u32 secret_len;
|
|
u64 reserved;
|
|
u8 secret_id[UV_SECRET_ID_LEN];
|
|
} __packed;
|
|
|
|
#define UVIO_MAX_SECRET_ENTRIES ((UVIO_LIST_SECRETS_MAX_LEN - 16) / \
|
|
sizeof(struct uvio_list_secret_entry))
|
|
|
|
struct uvio_list_secrets {
|
|
u16 num_secrets_stored;
|
|
u16 num_secrets_total;
|
|
u16 next_secret_idx;
|
|
u16 reserved1;
|
|
u64 reserved2;
|
|
struct uvio_list_secret_entry secret_entries[UVIO_MAX_SECRET_ENTRIES];
|
|
} __packed;
|
|
|
|
int uv_open_device(bool verbose);
|
|
|
|
int pvsecrets_list(int uv_fd, bool all, bool hex, const char *type_filter,
|
|
const char *secret_id, const char *secret_name,
|
|
bool verbose);
|
|
int pvsecrets_import(struct keystore *keystore, int uv_fd,
|
|
const char *secret_id, const char *secret_name,
|
|
const char *name, const char *description,
|
|
const char *volumes, const char *volume_type,
|
|
long sector_size, bool gen_passphrase,
|
|
const char *passphrase_file, bool verbose,
|
|
int pkey_fd);
|
|
|
|
#endif
|