mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
Ingo Franzki
1091b0bf65
Add a utility function to select an APQN that is set up with a specific master key for use with the CCA host library. The selection is based on the master key verification pattern, which is typically obtained from an existing secure AES key. The function iterates over a set of APQNs to find one that is setup with the desired master key in the CURRENT or OLD master key register, and optionally has a new master key loaded. It then selects the found APQN for use with the CCA host library. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Harald Freudenberger <freude@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
94 lines
2.4 KiB
C
94 lines
2.4 KiB
C
/*
|
|
* zkey - Generate, re-encipher, and validate secure keys
|
|
*
|
|
* This header file defines the interface to the CCA host library.
|
|
*
|
|
* Copyright IBM Corp. 2019
|
|
*
|
|
* s390-tools is free software; you can redistribute it and/or modify
|
|
* it under the terms of the MIT license. See LICENSE for details.
|
|
*/
|
|
|
|
#ifndef CCA_H
|
|
#define CCA_H
|
|
|
|
#include "lib/zt_common.h"
|
|
|
|
#define METHOD_OLD_TO_CURRENT "RTCMK "
|
|
#define METHOD_CURRENT_TO_NEW "RTNMK "
|
|
|
|
typedef void (*t_CSNBKTC)(long *return_code,
|
|
long *reason_code,
|
|
long *exit_data_length,
|
|
unsigned char *exit_data,
|
|
long *rule_array_count,
|
|
unsigned char *rule_array,
|
|
unsigned char *key_identifier);
|
|
|
|
typedef void (*t_CSUACFV)(long *return_code,
|
|
long *reason_code,
|
|
long *exit_data_length,
|
|
unsigned char *exit_data,
|
|
long *version_data_length,
|
|
unsigned char *version_data);
|
|
|
|
typedef void (*t_CSUACFQ)(long *return_code,
|
|
long *reason_code,
|
|
long *exit_data_length,
|
|
unsigned char *exit_data,
|
|
long *rule_array_count,
|
|
unsigned char *rule_array,
|
|
long *verb_data_length,
|
|
unsigned char *verb_data);
|
|
|
|
typedef void (*t_CSUACRA)(long *return_code,
|
|
long *reason_code,
|
|
long *exit_data_length,
|
|
unsigned char *exit_data,
|
|
long *rule_array_count,
|
|
unsigned char *rule_array,
|
|
long *ressource_name_length,
|
|
unsigned char *ressource_name);
|
|
|
|
typedef void (*t_CSUACRD)(long *return_code,
|
|
long *reason_code,
|
|
long *exit_data_length,
|
|
unsigned char *exit_data,
|
|
long *rule_array_count,
|
|
unsigned char *rule_array,
|
|
long *ressource_name_length,
|
|
unsigned char *ressource_name);
|
|
|
|
struct cca_version {
|
|
unsigned int ver;
|
|
unsigned int rel;
|
|
unsigned int mod;
|
|
};
|
|
|
|
struct cca_lib {
|
|
void *lib_csulcca;
|
|
t_CSNBKTC dll_CSNBKTC;
|
|
t_CSUACFV dll_CSUACFV;
|
|
t_CSUACFQ dll_CSUACFQ;
|
|
t_CSUACRA dll_CSUACRA;
|
|
t_CSUACRD dll_CSUACRD;
|
|
struct cca_version version;
|
|
};
|
|
|
|
int load_cca_library(struct cca_lib *cca, bool verbose);
|
|
|
|
int key_token_change(struct cca_lib *cca,
|
|
u8 *secure_key, unsigned int secure_key_size,
|
|
char *method, bool verbose);
|
|
|
|
int select_cca_adapter(struct cca_lib *cca, int card, int domain, bool verbose);
|
|
|
|
#define FLAG_SEL_CCA_MATCH_CUR_MKVP 0x01
|
|
#define FLAG_SEL_CCA_MATCH_OLD_MKVP 0x02
|
|
#define FLAG_SEL_CCA_NEW_MUST_BE_SET 0x80
|
|
|
|
int select_cca_adapter_by_mkvp(struct cca_lib *cca, u64 mkvp, const char *apqns,
|
|
unsigned int flags, bool verbose);
|
|
|
|
#endif
|