mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
When a secure key has been converted from type CCA-AESDATA to type CCA-AESCIPHER, the secure key stored in the LUKS2 header of a volume encrypted with that key should also changed. Command 'zkey-cryptsetup setkey' allows to set (replace) the volume key in the LUKS2 header. It now accepts keys to be set that have a different size of the original volume keys. CCA-AESCIPHER keys are larger than CCA-AESDATA keys. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Harald Freudenberger <freude@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>