Home
last modified time | relevance | path

Searched refs:secret (Results 1 – 25 of 66) sorted by relevance

123

/Linux-v6.1/include/crypto/
Dcurve25519.h29 const u8 secret[CURVE25519_KEY_SIZE]);
35 const u8 secret[CURVE25519_KEY_SIZE], in curve25519()
39 curve25519_arch(mypublic, secret, basepoint); in curve25519()
41 curve25519_generic(mypublic, secret, basepoint); in curve25519()
48 const u8 secret[CURVE25519_KEY_SIZE]) in curve25519_generate_public()
50 if (unlikely(!crypto_memneq(secret, curve25519_null_point, in curve25519_generate_public()
55 curve25519_base_arch(pub, secret); in curve25519_generate_public()
57 curve25519_generic(pub, secret, curve25519_base_point); in curve25519_generate_public()
61 static inline void curve25519_clamp_secret(u8 secret[CURVE25519_KEY_SIZE]) in curve25519_clamp_secret()
63 secret[0] &= 248; in curve25519_clamp_secret()
[all …]
/Linux-v6.1/fs/crypto/
Dkeyring.c41 static void wipe_master_key_secret(struct fscrypt_master_key_secret *secret) in wipe_master_key_secret() argument
43 fscrypt_destroy_hkdf(&secret->hkdf); in wipe_master_key_secret()
44 memzero_explicit(secret, sizeof(*secret)); in wipe_master_key_secret()
416 struct fscrypt_master_key_secret *secret, in add_new_master_key() argument
444 move_master_key_secret(&mk->mk_secret, secret); in add_new_master_key()
461 struct fscrypt_master_key_secret *secret) in add_existing_master_key() argument
488 move_master_key_secret(&mk->mk_secret, secret); in add_existing_master_key()
495 struct fscrypt_master_key_secret *secret, in do_add_master_key() argument
509 err = add_new_master_key(sb, secret, mk_spec); in do_add_master_key()
516 err = add_existing_master_key(mk, secret); in do_add_master_key()
[all …]
/Linux-v6.1/crypto/
Decdh_helper.c37 struct kpp_secret secret = { in crypto_ecdh_encode_key() local
48 ptr = ecdh_pack_data(ptr, &secret, sizeof(secret)); in crypto_ecdh_encode_key()
60 struct kpp_secret secret; in crypto_ecdh_decode_key() local
65 ptr = ecdh_unpack_data(&secret, ptr, sizeof(secret)); in crypto_ecdh_decode_key()
66 if (secret.type != CRYPTO_KPP_SECRET_TYPE_ECDH) in crypto_ecdh_decode_key()
69 if (unlikely(len < secret.len)) in crypto_ecdh_decode_key()
73 if (secret.len != crypto_ecdh_key_len(params)) in crypto_ecdh_decode_key()
Ddh_helper.c44 struct kpp_secret secret = { in crypto_dh_encode_key() local
52 ptr = dh_pack_data(ptr, end, &secret, sizeof(secret)); in crypto_dh_encode_key()
69 struct kpp_secret secret; in __crypto_dh_decode_key() local
74 ptr = dh_unpack_data(&secret, ptr, sizeof(secret)); in __crypto_dh_decode_key()
75 if (secret.type != CRYPTO_KPP_SECRET_TYPE_DH) in __crypto_dh_decode_key()
81 if (secret.len != crypto_dh_key_len(params)) in __crypto_dh_decode_key()
Dcurve25519-generic.c12 u8 *secret = kpp_tfm_ctx(tfm); in curve25519_set_secret() local
15 curve25519_generate_secret(secret); in curve25519_set_secret()
18 memcpy(secret, buf, CURVE25519_KEY_SIZE); in curve25519_set_secret()
27 const u8 *secret = kpp_tfm_ctx(tfm); in curve25519_compute_value() local
45 curve25519_generic(buf, secret, bp); in curve25519_compute_value()
Dtestmgr.h166 const unsigned char *secret; member
1349 .secret =
1456 .secret =
1566 .secret =
1654 .secret =
1727 .secret =
1847 .secret =
1936 .secret =
2088 .secret =
2193 .secret =
[all …]
/Linux-v6.1/arch/arm/crypto/
Dcurve25519-glue.c23 const u8 secret[CURVE25519_KEY_SIZE],
43 const u8 secret[CURVE25519_KEY_SIZE]) in curve25519_base_arch()
45 return curve25519_arch(pub, secret, curve25519_base_point); in curve25519_base_arch()
52 u8 *secret = kpp_tfm_ctx(tfm); in curve25519_set_secret() local
55 curve25519_generate_secret(secret); in curve25519_set_secret()
58 memcpy(secret, buf, CURVE25519_KEY_SIZE); in curve25519_set_secret()
67 const u8 *secret = kpp_tfm_ctx(tfm); in curve25519_compute_value() local
85 curve25519_arch(buf, secret, bp); in curve25519_compute_value()
/Linux-v6.1/Documentation/ABI/testing/
Dsecurityfs-secrets-coco9 platforms (such as AMD SEV and SEV-ES) for secret injection by
15 secret appears as a file under <securityfs>/secrets/coco,
18 if the EFI secret area is populated.
21 Reading the file returns the content of secret entry.
22 Unlinking the file overwrites the secret data with zeroes and
23 removes the entry from the filesystem. A secret cannot be read
35 Reading the secret data by reading a file::
38 the-content-of-the-secret-data
40 Wiping a secret by unlinking a file::
51 the EFI secret area".
/Linux-v6.1/Documentation/security/secrets/
Dcoco.rst7 This document describes how Confidential Computing secret injection is handled
18 secret injection is performed early in the VM launch process, before the
28 The guest firmware may reserve a designated memory area for secret injection,
35 During the VM's launch, the virtual machine manager may inject a secret to that
38 Guest Owner secret data should be a GUIDed table of secret values; the binary
40 "Structure of the EFI secret area".
42 On kernel start, the kernel's EFI driver saves the location of the secret area
44 Later it checks if the secret area is populated: it maps the area and checks
46 (``1e74f542-71dd-4d66-963e-ef4287ff173b``). If the secret area is populated,
56 provides the decryption key (= secret) using the secret injection mechanism.
[all …]
/Linux-v6.1/drivers/virt/coco/efi_secret/
DKconfig3 tristate "EFI secret area securityfs support"
8 This is a driver for accessing the EFI secret area via securityfs.
9 The EFI secret area is a memory area designated by the firmware for
10 confidential computing secret injection (for example for AMD SEV
13 a file wipes the secret from memory).
/Linux-v6.1/drivers/nvme/common/
Dauth.c153 struct nvme_dhchap_key *nvme_auth_extract_key(unsigned char *secret, in nvme_auth_extract_key() argument
160 size_t allocated_len = strlen(secret); in nvme_auth_extract_key()
163 p = strrchr(secret, ':'); in nvme_auth_extract_key()
165 allocated_len = p - secret; in nvme_auth_extract_key()
175 key_len = base64_decode(secret, allocated_len, key->key); in nvme_auth_extract_key()
458 int nvme_auth_generate_key(u8 *secret, struct nvme_dhchap_key **ret_key) in nvme_auth_generate_key() argument
463 if (!secret) { in nvme_auth_generate_key()
468 if (sscanf(secret, "DHHC-1:%hhd:%*s:", &key_hash) != 1) in nvme_auth_generate_key()
472 key = nvme_auth_extract_key(secret + 10, key_hash); in nvme_auth_generate_key()
/Linux-v6.1/net/sctp/
Dauth.c258 struct sctp_auth_bytes *secret; in sctp_auth_asoc_set_secret() local
266 secret = sctp_auth_create_key(auth_len, gfp); in sctp_auth_asoc_set_secret()
267 if (!secret) in sctp_auth_asoc_set_secret()
271 memcpy(secret->data, ep_key->key->data, ep_key->key->len); in sctp_auth_asoc_set_secret()
275 memcpy(secret->data + offset, first_vector->data, first_vector->len); in sctp_auth_asoc_set_secret()
278 memcpy(secret->data + offset, last_vector->data, last_vector->len); in sctp_auth_asoc_set_secret()
280 return secret; in sctp_auth_asoc_set_secret()
295 struct sctp_auth_bytes *secret = NULL; in sctp_auth_asoc_create_secret() local
340 secret = sctp_auth_asoc_set_secret(ep_key, first_vector, last_vector, in sctp_auth_asoc_create_secret()
346 return secret; in sctp_auth_asoc_create_secret()
[all …]
/Linux-v6.1/security/keys/
Ddh.c152 uint8_t *secret; in __keyctl_dh_compute() local
217 secret = kmalloc(secretlen, GFP_KERNEL); in __keyctl_dh_compute()
218 if (!secret) { in __keyctl_dh_compute()
222 ret = crypto_dh_encode_key(secret, secretlen, &dh_inputs); in __keyctl_dh_compute()
232 ret = crypto_kpp_set_secret(tfm, secret, secretlen); in __keyctl_dh_compute()
312 kfree_sensitive(secret); in __keyctl_dh_compute()
/Linux-v6.1/arch/x86/crypto/
Dcurve25519-x86_64.c1595 const u8 secret[CURVE25519_KEY_SIZE], in curve25519_arch()
1599 curve25519_ever64(mypublic, secret, basepoint); in curve25519_arch()
1601 curve25519_generic(mypublic, secret, basepoint); in curve25519_arch()
1606 const u8 secret[CURVE25519_KEY_SIZE]) in curve25519_base_arch()
1609 curve25519_ever64_base(pub, secret); in curve25519_base_arch()
1611 curve25519_generic(pub, secret, curve25519_base_point); in curve25519_base_arch()
1618 u8 *secret = kpp_tfm_ctx(tfm); in curve25519_set_secret() local
1621 curve25519_generate_secret(secret); in curve25519_set_secret()
1624 memcpy(secret, buf, CURVE25519_KEY_SIZE); in curve25519_set_secret()
1633 const u8 *secret = kpp_tfm_ctx(tfm); in curve25519_generate_public_key() local
[all …]
/Linux-v6.1/net/ceph/
Dauth_x.c57 static int ceph_x_encrypt(struct ceph_crypto_key *secret, void *buf, in ceph_x_encrypt() argument
67 ret = ceph_crypt(secret, true, buf + sizeof(u32), buf_len - sizeof(u32), in ceph_x_encrypt()
77 static int __ceph_x_decrypt(struct ceph_crypto_key *secret, void *p, in __ceph_x_decrypt() argument
84 ret = ceph_crypt(secret, false, p, ciphertext_len, ciphertext_len, in __ceph_x_decrypt()
97 static int ceph_x_decrypt(struct ceph_crypto_key *secret, void **p, void *end) in ceph_x_decrypt() argument
105 ret = __ceph_x_decrypt(secret, *p, ciphertext_len); in ceph_x_decrypt()
161 struct ceph_crypto_key *secret, in process_one_ticket() argument
197 ret = ceph_x_decrypt(secret, p, end); in process_one_ticket()
271 struct ceph_crypto_key *secret, in ceph_x_proc_ticket_reply() argument
286 ret = process_one_ticket(ac, secret, p, end); in ceph_x_proc_ticket_reply()
[all …]
Dauth_x.h41 struct ceph_crypto_key secret; member
/Linux-v6.1/net/bluetooth/
Decdh_helper.c61 u8 secret[32]) in compute_ecdh_secret()
85 sg_init_one(&dst, secret, 32); in compute_ecdh_secret()
101 swap_digits((u64 *)secret, (u64 *)tmp, 4); in compute_ecdh_secret()
102 memcpy(secret, tmp, 32); in compute_ecdh_secret()
Decdh_helper.h27 u8 secret[32]);
/Linux-v6.1/include/linux/
Dnvme-auth.h27 struct nvme_dhchap_key *nvme_auth_extract_key(unsigned char *secret,
31 int nvme_auth_generate_key(u8 *secret, struct nvme_dhchap_key **ret_key);
/Linux-v6.1/include/keys/
Dtrusted_tpm.h23 unsigned char secret[SHA1_DIGEST_SIZE]; member
71 16, 1, &s->secret, SHA1_DIGEST_SIZE, 0); in dump_sess()
/Linux-v6.1/net/ipv6/
Dseg6.c158 char *secret; in seg6_genl_sethmac() local
205 secret = (char *)nla_data(info->attrs[SEG6_ATTR_SECRET]); in seg6_genl_sethmac()
213 memcpy(hinfo->secret, secret, slen); in seg6_genl_sethmac()
306 nla_put(msg, SEG6_ATTR_SECRET, hinfo->slen, hinfo->secret) || in __seg6_hmac_fill_info()
/Linux-v6.1/Documentation/security/keys/
Decryptfs.rst70 into the '/secret' directory::
73 ecryptfs_cipher=aes,ecryptfs_key_bytes=32 /secret /secret
/Linux-v6.1/drivers/gpu/drm/nouveau/nvkm/engine/
Dfalcon.c141 falcon->secret = (falcon->addr == 0x087000) ? 1 : 0; in nvkm_falcon_oneinit()
145 falcon->secret = (caps & 0x00000030) >> 4; in nvkm_falcon_oneinit()
153 nvkm_debug(subdev, "secret level: %d\n", falcon->secret); in nvkm_falcon_oneinit()
171 if (falcon->secret && falcon->version < 4) { in nvkm_falcon_init()
/Linux-v6.1/drivers/net/wireguard/
Dcookie.c24 get_random_bytes(checker->secret, NOISE_HASH_LEN); in wg_cookie_checker_init()
100 get_random_bytes(checker->secret, NOISE_HASH_LEN); in make_cookie()
106 blake2s_init_key(&state, COOKIE_LEN, checker->secret, NOISE_HASH_LEN); in make_cookie()
/Linux-v6.1/drivers/gpu/drm/nouveau/nvkm/falcon/
Dbase.c31 if (secure && !falcon->secret) { in nvkm_falcon_load_imem()
155 falcon->secret = (reg >> 4) & 0x3; in nvkm_falcon_oneinit()

123