s390/crypt: Add protected key AES module

Browse source

This patch introduces a new in-kernel-crypto blockcipher
called 'paes' which implements AES with protected keys.
The paes blockcipher can be used similar to the aes
blockcipher but uses secure key material to derive the
working protected key and so offers an encryption
implementation where never a clear key value is exposed
in memory.

The paes module is only available for the s390 platform
providing a minimal hardware support of CPACF enabled
with at least MSA level 3. Upon module initialization
these requirements are checked.

Includes additional contribution from Harald Freudenberger.

Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>

...

This commit is contained in:

Martin Schwidefsky 2016-11-04 11:57:15 +01:00

parent 8693b9145b

commit 2793784307

4 changed files with 634 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

arch/s390/crypto/Makefile

View file

619

arch/s390/crypto/paes_s390.c

View file

14

arch/s390/include/asm/cpacf.h

View file

1

drivers/crypto/Kconfig

View file