mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
ed6e3b7270
For zkey-cryptsetup commands reencipher and setkey, use the same password-based key derivation function (PBKDF) when creating unbound key-sots that the key slot uses, which was unlocked through the specified passphrase. That way the unlocked key slots created by these commands inherit the PBKDF from the existing key slot. This feature requires libcryptsetup version 2.1 or later. If an older libcryptsetup version is available at compile time, then PBKDF2 is used for newly created unbound key slots. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>