Ingo Franzki 355700d606 zkey: Allow to associate a LUKS volume to an AES key and a HMAC key ...

For combined integrity protected with encryption, a LUKS2 volume can be
associated to exactly one AES type key and also to exactly one HMAC type
key.

For other volume types, a volume can only be associated to exactly one
key, either an AES type key, or an HMAC type key.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-01-19 13:03:19 +01:00

..

dracut

zkey/dracut: Add a dracut config file for zkey

2025-06-11 12:38:45 +02:00

ekmfweb

zkey/ekmfweb: Validate the certificate during client registration

2025-11-07 14:33:26 +01:00

initramfs

zkey/initramfs: Update initramfs hook to correct drivers and include zkey plugins

2025-06-11 12:38:45 +02:00

kmip

zkey/kmip/zkey-kmip.1: Fix typos in man page

2025-03-19 16:35:04 +01:00

cca.c

zkey: Adjust CCA host library version detection for newer CCA versions

2025-04-16 12:12:45 +02:00

cca.h

zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys

2021-06-18 13:20:08 +02:00

ep11.c

zkey: Fix EP11 secure key reencipher function

2025-05-21 15:50:18 +02:00

ep11.h

zkey: Add support for generating and importing exportable secure keys

2025-09-15 11:47:32 +02:00

keystore.c

zkey: Allow to associate a LUKS volume to an AES key and a HMAC key

2026-01-19 13:03:19 +01:00

keystore.h

zkey: Add PVSECRET-HMAC key type and general HMAC support

2026-01-19 13:03:19 +01:00

kms-plugin.h

zkey: Allow KMS plugin to import a key of a specific type

2021-07-07 13:53:06 +02:00

kms-plugins.conf

zkey-kmip: Add new zkey KMS plugin for KMIP

2021-07-07 13:53:06 +02:00

kms.c

zkey: Support generating verification patterns for HMAC keys

2026-01-19 13:03:19 +01:00

kms.h

zkey: Allow KMS plugin to import a key of a specific type

2021-07-07 13:53:06 +02:00

Makefile

zkey: Require cryptsetup v2.8.2 or later

2026-01-19 13:03:19 +01:00

misc.h

zkey: Fix sparse, gcc 10, and -Wpedantic warnings

2020-10-12 13:12:55 +02:00

pkey.c

zkey: Support generating verification patterns for HMAC keys

2026-01-19 13:03:19 +01:00

pkey.h

zkey: Support generating verification patterns for HMAC keys

2026-01-19 13:03:19 +01:00

plugin-utils.c

zkey-ekmfweb: Move some functions used by multiple KMS plugins to common code

2021-07-07 13:53:06 +02:00

plugin-utils.h

zkey-ekmfweb: Move some functions used by multiple KMS plugins to common code

2021-07-07 13:53:06 +02:00

properties.c

zkey: Allow comments and empty lines in properties files

2021-07-07 13:53:06 +02:00

properties.h

zkey: Store volume type property all uppercase

2019-09-06 12:44:34 +02:00

pvsecrets.c

zkey: Add PVSECRET-HMAC key type and general HMAC support

2026-01-19 13:03:19 +01:00

pvsecrets.h

zkey: Add the 'pvsecrets import' command

2025-01-10 16:38:45 +01:00

utils.c

zkey: Also check for deconfigured and check-stopped cards

2023-11-07 14:13:38 +01:00

utils.h

zkey: Add support to store LUKS2 dummy passphrase in key repository

2020-12-15 11:10:50 +01:00

zkey-cryptsetup.1

zkey: Add PVSECRET-HMAC key type and general HMAC support

2026-01-19 13:03:19 +01:00

zkey-cryptsetup.c

zkey: Add PVSECRET-HMAC key type and general HMAC support

2026-01-19 13:03:19 +01:00

zkey.1

zkey: Allow to associate a LUKS volume to an AES key and a HMAC key

2026-01-19 13:03:19 +01:00

zkey.c

zkey: Add INTEGRITY volume type

2026-01-19 13:03:19 +01:00