kernel/linux.git/include/linux/nvme-auth.h, branch v6.19.11Linux kernel stable tree (mirror)https://git.radix-linux.su/kernel/linux.git/atom?h=v6.19.112025-03-20T23:53:53+00:00nvme: add nvme_auth_derive_tls_psk()2025-03-20T23:53:53+00:00Hannes Reineckehare@kernel.org2025-02-24T12:38:12+00:00urn:sha1:9d5c0fffee266f61ccc745faa6298dafe2b8c5bf
Add a function to derive the TLS PSK as specified TP8018.
Signed-off-by: Hannes Reinecke <hare@kernel.org>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Keith Busch <kbusch@kernel.org>
nvme: add nvme_auth_generate_digest()2025-03-20T23:53:53+00:00Hannes Reineckehare@kernel.org2025-02-24T12:38:11+00:00urn:sha1:71972b9ffe1efe183a87d76d094236f9ec30656e
Add a function to calculate the PSK digest as specified in TP8018.
Signed-off-by: Hannes Reinecke <hare@kernel.org>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Keith Busch <kbusch@kernel.org>
nvme: add nvme_auth_generate_psk()2025-03-20T23:53:53+00:00Hannes Reineckehare@kernel.org2025-02-24T12:38:10+00:00urn:sha1:5c12a9cdb5ad54621f1b7c02df7993a4a1b86a46
Add a function to generate a NVMe PSK from the shared credentials
negotiated by DH-HMAC-CHAP.
Signed-off-by: Hannes Reinecke <hare@kernel.org>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Keith Busch <kbusch@kernel.org>
nvme-auth: use transformed key size to create resp2023-10-17T20:57:54+00:00Mark O'Donovanshiftee@posteo.net2023-10-17T17:09:18+00:00urn:sha1:f047daed179a451657d1e66b5fe4030a593a000c
This does not change current behaviour as the driver currently
verifies that the secret size is the same size as the length of
the transformation hash.
Co-developed-by: Akash Appaiah <Akash.Appaiah@dell.com>
Signed-off-by: Akash Appaiah <Akash.Appaiah@dell.com>
Signed-off-by: Mark O'Donovan <shiftee@posteo.net>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Keith Busch <kbusch@kernel.org>
nvme-auth: alloc nvme_dhchap_key as single buffer2023-10-17T20:57:54+00:00Mark O'Donovanshiftee@posteo.net2023-10-17T17:09:17+00:00urn:sha1:3ebed3749f1767927229d568eea29daaf9f272d5
Co-developed-by: Akash Appaiah <Akash.Appaiah@dell.com>
Signed-off-by: Akash Appaiah <Akash.Appaiah@dell.com>
Signed-off-by: Mark O'Donovan <shiftee@posteo.net>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Keith Busch <kbusch@kernel.org>
nvme-auth: Diffie-Hellman key exchange support2022-08-02T23:14:49+00:00Hannes Reineckehare@suse.de2022-06-27T09:52:03+00:00urn:sha1:b61775d185a395f26fecdc7898e39de677a6c3dd
Implement Diffie-Hellman key exchange using FFDHE groups
for NVMe In-Band Authentication.
Signed-off-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
nvme: implement In-Band authentication2022-08-02T23:14:49+00:00Hannes Reineckehare@suse.de2022-06-27T09:52:02+00:00urn:sha1:f50fff73d620cd6e8f48bc58d4f1c944615a3fea
Implement NVMe-oF In-Band authentication according to NVMe TPAR 8006.
This patch adds two new fabric options 'dhchap_secret' to specify the
pre-shared key (in ASCII respresentation according to NVMe 2.0 section
8.13.5.8 'Secret representation') and 'dhchap_ctrl_secret' to specify
the pre-shared controller key for bi-directional authentication of both
the host and the controller.
Re-authentication can be triggered by writing the PSK into the new
controller sysfs attribute 'dhchap_secret' or 'dhchap_ctrl_secret'.
Signed-off-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Christoph Hellwig <hch@lst.de>
[axboe: fold in clang build fix]
Signed-off-by: Jens Axboe <axboe@kernel.dk>