s390/zcrypt: extend cca_findcard function and helper

Browse source

Rework and extension of the cca_findcard function to be prepared for
other types of secure key blobs. Split the function and extract an
internal function which has no awareness of key blobs any
more. Improve this function and the helper code around to be able to
check for a minimal crypto card hardware level (Background: the newer
AES cipher keys need to match to the master key verification pattern
and need to have a crypto card CEX6 or higher).

No API change, neither for the in-kernel API nor the ioctl interface.

Signed-off-by: Harald Freudenberger <freude@linux.ibm.com>
Reviewed-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com>

...

This commit is contained in:

Harald Freudenberger 2019-06-18 15:53:12 +02:00 • committed by Vasily Gorbik

parent 183cb46954

commit 4da57a2fea

4 changed files with 83 additions and 24 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

28

drivers/s390/crypto/zcrypt_api.c

View file

7

drivers/s390/crypto/zcrypt_api.h

View file

69

drivers/s390/crypto/zcrypt_ccamisc.c

View file

3

drivers/s390/crypto/zcrypt_ccamisc.h

View file