/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */ /* * Userspace interface to the pkey device driver * * Copyright IBM Corp. 2017 * * Author: Harald Freudenberger <freude@de.ibm.com> * */ #ifndef _UAPI_PKEY_H #define _UAPI_PKEY_H #include <linux/ioctl.h> #include <linux/types.h> /* * Ioctl calls supported by the pkey device driver */ #define PKEY_IOCTL_MAGIC 'p' #define SECKEYBLOBSIZE 64 /* secure key blob size is always 64 bytes */ #define MAXPROTKEYSIZE 64 /* a protected key blob may be up to 64 bytes */ #define MAXCLRKEYSIZE 32 /* a clear key value may be up to 32 bytes */ /* defines for the type field within the pkey_protkey struct */ #define PKEY_KEYTYPE_AES_128 1 #define PKEY_KEYTYPE_AES_192 2 #define PKEY_KEYTYPE_AES_256 3 /* Struct to hold a secure key blob */ struct pkey_seckey { __u8 seckey[SECKEYBLOBSIZE]; /* the secure key blob */ }; /* Struct to hold protected key and length info */ struct pkey_protkey { __u32 type; /* key type, one of the PKEY_KEYTYPE values */ __u32 len; /* bytes actually stored in protkey[] */ __u8 protkey[MAXPROTKEYSIZE]; /* the protected key blob */ }; /* Struct to hold a clear key value */ struct pkey_clrkey { __u8 clrkey[MAXCLRKEYSIZE]; /* 16, 24, or 32 byte clear key value */ }; /* * Generate secure key */ struct pkey_genseck { __u16 cardnr; /* in: card to use or FFFF for any */ __u16 domain; /* in: domain or FFFF for any */ __u32 keytype; /* in: key type to generate */ struct pkey_seckey seckey; /* out: the secure key blob */ }; #define PKEY_GENSECK _IOWR(PKEY_IOCTL_MAGIC, 0x01, struct pkey_genseck) /* * Construct secure key from clear key value */ struct pkey_clr2seck { __u16 cardnr; /* in: card to use or FFFF for any */ __u16 domain; /* in: domain or FFFF for any */ __u32 keytype; /* in: key type to generate */ struct pkey_clrkey clrkey; /* in: the clear key value */ struct pkey_seckey seckey; /* out: the secure key blob */ }; #define PKEY_CLR2SECK _IOWR(PKEY_IOCTL_MAGIC, 0x02, struct pkey_clr2seck) /* * Fabricate protected key from a secure key */ struct pkey_sec2protk { __u16 cardnr; /* in: card to use or FFFF for any */ __u16 domain; /* in: domain or FFFF for any */ struct pkey_seckey seckey; /* in: the secure key blob */ struct pkey_protkey protkey; /* out: the protected key */ }; #define PKEY_SEC2PROTK _IOWR(PKEY_IOCTL_MAGIC, 0x03, struct pkey_sec2protk) /* * Fabricate protected key from an clear key value */ struct pkey_clr2protk { __u32 keytype; /* in: key type to generate */ struct pkey_clrkey clrkey; /* in: the clear key value */ struct pkey_protkey protkey; /* out: the protected key */ }; #define PKEY_CLR2PROTK _IOWR(PKEY_IOCTL_MAGIC, 0x04, struct pkey_clr2protk) /* * Search for matching crypto card based on the Master Key * Verification Pattern provided inside a secure key. */ struct pkey_findcard { struct pkey_seckey seckey; /* in: the secure key blob */ __u16 cardnr; /* out: card number */ __u16 domain; /* out: domain number */ }; #define PKEY_FINDCARD _IOWR(PKEY_IOCTL_MAGIC, 0x05, struct pkey_findcard) /* * Combined together: findcard + sec2prot */ struct pkey_skey2pkey { struct pkey_seckey seckey; /* in: the secure key blob */ struct pkey_protkey protkey; /* out: the protected key */ }; #define PKEY_SKEY2PKEY _IOWR(PKEY_IOCTL_MAGIC, 0x06, struct pkey_skey2pkey) /* * Verify the given secure key for being able to be useable with * the pkey module. Check for correct key type and check for having at * least one crypto card being able to handle this key (master key * or old master key verification pattern matches). * Return some info about the key: keysize in bits, keytype (currently * only AES), flag if key is wrapped with an old MKVP. */ struct pkey_verifykey { struct pkey_seckey seckey; /* in: the secure key blob */ __u16 cardnr; /* out: card number */ __u16 domain; /* out: domain number */ __u16 keysize; /* out: key size in bits */ __u32 attributes; /* out: attribute bits */ }; #define PKEY_VERIFYKEY _IOWR(PKEY_IOCTL_MAGIC, 0x07, struct pkey_verifykey) #define PKEY_VERIFY_ATTR_AES 0x00000001 /* key is an AES key */ #define PKEY_VERIFY_ATTR_OLD_MKVP 0x00000100 /* key has old MKVP value */ #endif /* _UAPI_PKEY_H */
Name | Type | Size | Permission | Actions |
---|---|---|---|---|
Kbuild | File | 321 B | 0644 |
|
auxvec.h | File | 214 B | 0644 |
|
bitsperlong.h | File | 293 B | 0644 |
|
bpf_perf_event.h | File | 226 B | 0644 |
|
byteorder.h | File | 188 B | 0644 |
|
chpid.h | File | 456 B | 0644 |
|
chsc.h | File | 2.96 KB | 0644 |
|
clp.h | File | 549 B | 0644 |
|
cmb.h | File | 1.87 KB | 0644 |
|
dasd.h | File | 12.4 KB | 0644 |
|
debug.h | File | 857 B | 0644 |
|
guarded_storage.h | File | 1.18 KB | 0644 |
|
hypfs.h | File | 1.35 KB | 0644 |
|
ioctls.h | File | 191 B | 0644 |
|
ipcbuf.h | File | 738 B | 0644 |
|
kvm.h | File | 7.73 KB | 0644 |
|
kvm_para.h | File | 224 B | 0644 |
|
kvm_perf.h | File | 474 B | 0644 |
|
monwriter.h | File | 939 B | 0644 |
|
msgbuf.h | File | 1.14 KB | 0644 |
|
perf_regs.h | File | 887 B | 0644 |
|
pkey.h | File | 4.35 KB | 0644 |
|
posix_types.h | File | 1.4 KB | 0644 |
|
ptrace.h | File | 11.39 KB | 0644 |
|
qeth.h | File | 3.05 KB | 0644 |
|
schid.h | File | 332 B | 0644 |
|
sclp_ctl.h | File | 465 B | 0644 |
|
sembuf.h | File | 864 B | 0644 |
|
setup.h | File | 292 B | 0644 |
|
shmbuf.h | File | 1.34 KB | 0644 |
|
sie.h | File | 9.25 KB | 0644 |
|
sigcontext.h | File | 1.73 KB | 0644 |
|
siginfo.h | File | 302 B | 0644 |
|
signal.h | File | 3.26 KB | 0644 |
|
socket.h | File | 2.24 KB | 0644 |
|
stat.h | File | 2.9 KB | 0644 |
|
statfs.h | File | 1.03 KB | 0644 |
|
sthyi.h | File | 178 B | 0644 |
|
tape390.h | File | 2.76 KB | 0644 |
|
termios.h | File | 1.14 KB | 0644 |
|
types.h | File | 525 B | 0644 |
|
ucontext.h | File | 1.18 KB | 0644 |
|
unistd.h | File | 12.32 KB | 0644 |
|
virtio-ccw.h | File | 444 B | 0644 |
|
vmcp.h | File | 737 B | 0644 |
|
vtoc.h | File | 7.36 KB | 0644 |
|
zcrypt.h | File | 10.94 KB | 0644 |
|