Ingo Franzki 771c794580 zkey-cryptsetup: Support PHMAC integrity with setkey command ...

In case the volume is integrity protected, and the integrity algorithm is
PHMAC, then the setkey command also checks the integrity key part of the
volume key, and then sets the key into a new key slot, and sets the
verification pattern to the verification-pattern token.

Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>
Reviewed-by: Finn Callies <fcallies@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2026-01-19 13:03:19 +01:00

..

dracut

zkey/dracut: Add a dracut config file for zkey

2025-06-11 12:38:45 +02:00

ekmfweb

zkey/ekmfweb: Validate the certificate during client registration

2025-11-07 14:33:26 +01:00

initramfs

zkey/initramfs: Update initramfs hook to correct drivers and include zkey plugins

2025-06-11 12:38:45 +02:00

kmip

zkey/kmip/zkey-kmip.1: Fix typos in man page

2025-03-19 16:35:04 +01:00

cca.c

zkey: Adjust CCA host library version detection for newer CCA versions

2025-04-16 12:12:45 +02:00

cca.h

zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys

2021-06-18 13:20:08 +02:00

ep11.c

zkey: Fix EP11 secure key reencipher function

2025-05-21 15:50:18 +02:00

ep11.h

zkey: Add support for generating and importing exportable secure keys

2025-09-15 11:47:32 +02:00

keystore.c

zkey: Support LUKS2 with combined encryption and integrity

2026-01-19 13:03:19 +01:00

keystore.h

zkey: Add integritytab and integritysetup commands for integrity volumes

2026-01-19 13:03:19 +01:00

kms-plugin.h

zkey: Allow KMS plugin to import a key of a specific type

2021-07-07 13:53:06 +02:00

kms-plugins.conf

zkey-kmip: Add new zkey KMS plugin for KMIP

2021-07-07 13:53:06 +02:00

kms.c

zkey: Support generating verification patterns for HMAC keys

2026-01-19 13:03:19 +01:00

kms.h

zkey: Allow KMS plugin to import a key of a specific type

2021-07-07 13:53:06 +02:00

Makefile

zkey: Require cryptsetup v2.8.2 or later

2026-01-19 13:03:19 +01:00

misc.h

zkey: Fix sparse, gcc 10, and -Wpedantic warnings

2020-10-12 13:12:55 +02:00

pkey.c

zkey: Support generating verification patterns for HMAC keys

2026-01-19 13:03:19 +01:00

pkey.h

zkey: Support generating verification patterns for HMAC keys

2026-01-19 13:03:19 +01:00

plugin-utils.c

zkey-ekmfweb: Move some functions used by multiple KMS plugins to common code

2021-07-07 13:53:06 +02:00

plugin-utils.h

zkey-ekmfweb: Move some functions used by multiple KMS plugins to common code

2021-07-07 13:53:06 +02:00

properties.c

zkey: Allow comments and empty lines in properties files

2021-07-07 13:53:06 +02:00

properties.h

zkey: Store volume type property all uppercase

2019-09-06 12:44:34 +02:00

pvsecrets.c

zkey: Add PVSECRET-HMAC key type and general HMAC support

2026-01-19 13:03:19 +01:00

pvsecrets.h

zkey: Add the 'pvsecrets import' command

2025-01-10 16:38:45 +01:00

utils.c

zkey: Also check for deconfigured and check-stopped cards

2023-11-07 14:13:38 +01:00

utils.h

zkey: Add support to store LUKS2 dummy passphrase in key repository

2020-12-15 11:10:50 +01:00

zkey-cryptsetup.1

zkey: Add PVSECRET-HMAC key type and general HMAC support

2026-01-19 13:03:19 +01:00

zkey-cryptsetup.c

zkey-cryptsetup: Support PHMAC integrity with setkey command

2026-01-19 13:03:19 +01:00

zkey.1

zkey: Support LUKS2 with combined encryption and integrity

2026-01-19 13:03:19 +01:00

zkey.c

zkey: Add integritytab and integritysetup commands for integrity volumes

2026-01-19 13:03:19 +01:00