]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-client.git/commit
libceph: add support for CEPH_CRYPTO_AES256KRB5
authorIlya Dryomov <idryomov@gmail.com>
Mon, 22 Dec 2025 19:41:27 +0000 (20:41 +0100)
committerIlya Dryomov <idryomov@gmail.com>
Wed, 28 Jan 2026 12:49:08 +0000 (13:49 +0100)
commit95f017c8349e7567f2a4a182e2b45ac9d1ca2da5
tree4702aa120ae690fb8e0afdb0e02a12f6354d57ea
parent4de8f2c25d3650927d2ec861434374219368f1ab
libceph: add support for CEPH_CRYPTO_AES256KRB5

This is based on AES256-CTS-HMAC384-192 crypto algorithm per RFC 8009
(i.e. Kerberos 5, hence the name) with custom-defined key usage numbers.
The implementation allows a given key to have/be linked to between one
and three usage numbers.

The existing CEPH_CRYPTO_AES remains in place and unchanged.  The
usage_slot parameter that needed to be added to ceph_crypt() and its
wrappers is simply ignored there.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
include/linux/ceph/ceph_fs.h
net/ceph/Kconfig
net/ceph/auth_x.c
net/ceph/auth_x_protocol.h
net/ceph/crypto.c
net/ceph/crypto.h