Ingo Franzki 3a3cea0061 zkey: Fix EP11 secure key reencipher function ...

Re-enciphering an EP11 secure key may fail with an error message like:
  "zkey-cryptsetup: Failed to re-encipher the secure volume key for device
  '<device>'"
or
  "zkey: Failed to re-encipher '<key>' from CURRENT to NEW master key"
or similar.

The verbose messages show the following debug message:
  "Command XCP_ADM_REENCRYPT failed. rc = 0x20"

This is due to uninitialized variables, which might cause the EP11 admin
request to contain garbage data, causing it to fail with CKR_DATA_INVALID
(0x20).

Fixes: 0be7efc956 ("zkey: Add support for re-enciphering EP11 secure keys")
Fixes: 4e2ebe0370 ("libseckey: Fix re-enciphering of EP11 secure key")
Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Joerg Schmidbauer <jschmidb@de.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2025-05-21 15:50:18 +02:00

..

Makefile

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_cca.c

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_ep11.c

zkey: Fix EP11 secure key reencipher function

2025-05-21 15:50:18 +02:00

sk_openssl.c

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_pkeymeth.c

libseckey: Add a secure key library

2021-07-07 13:53:06 +02:00

sk_provider.c

libseckey: Use OSSL_FUNC_keymgmt_im/export_types_ex functions

2023-03-17 10:56:11 +01:00

sk_utilities.c

libseckey: Fix error checking when building ECDSA signatures

2023-03-17 10:56:11 +01:00