mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
a5b58038a0
Perform a cross check of the APQNs when a new secure AES key is generated. When a set of APQNs are associated to a new secure key, these APQNs are cross checked. If a new secure key is generated outside of the key repository, or no APQNs are associated to a secure key generated inside the key repository, then all currently available APQNs are cross checked. If a master key mismatch is detected, then the key generation is rejected. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Harald Freudenberger <freude@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>