79a73d1887
The 'encrypted' key type defines its own payload format which contains a symmetric key randomly generated that cannot be used directly to mount an eCryptfs filesystem, because it expects an authentication token structure. This patch introduces the new format 'ecryptfs' that allows to store an authentication token structure inside the encrypted key payload containing a randomly generated symmetric key, as the same for the format 'default'. More details about the usage of encrypted keys with the eCryptfs filesystem can be found in the file 'Documentation/keys-ecryptfs.txt'. Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> Acked-by: Gianluca Ramunno <ramunno@polito.it> Acked-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
31 lines
973 B
C
31 lines
973 B
C
/*
|
|
* ecryptfs_format.h: helper functions for the encrypted key type
|
|
*
|
|
* Copyright (C) 2006 International Business Machines Corp.
|
|
* Copyright (C) 2010 Politecnico di Torino, Italy
|
|
* TORSEC group -- http://security.polito.it
|
|
*
|
|
* Authors:
|
|
* Michael A. Halcrow <mahalcro@us.ibm.com>
|
|
* Tyler Hicks <tyhicks@ou.edu>
|
|
* Roberto Sassu <roberto.sassu@polito.it>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, version 2 of the License.
|
|
*/
|
|
|
|
#ifndef __KEYS_ECRYPTFS_H
|
|
#define __KEYS_ECRYPTFS_H
|
|
|
|
#include <linux/ecryptfs.h>
|
|
|
|
#define PGP_DIGEST_ALGO_SHA512 10
|
|
|
|
u8 *ecryptfs_get_auth_tok_key(struct ecryptfs_auth_tok *auth_tok);
|
|
void ecryptfs_get_versions(int *major, int *minor, int *file_version);
|
|
int ecryptfs_fill_auth_tok(struct ecryptfs_auth_tok *auth_tok,
|
|
const char *key_desc);
|
|
|
|
#endif /* __KEYS_ECRYPTFS_H */
|