]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-client.git/commit
libceph: add support for CEPH_CRYPTO_AES256KRB5
authorIlya Dryomov <idryomov@gmail.com>
Mon, 22 Dec 2025 19:41:27 +0000 (20:41 +0100)
committerIlya Dryomov <idryomov@gmail.com>
Mon, 9 Feb 2026 11:29:22 +0000 (12:29 +0100)
commitb7cc142dbafeaf6c053284ca9121b9f70b6d6d06
treedb63504302b2f10d80af2ab73d9f06afecd98d83
parent6cec0b61aacce4da5125b21c718189f0dc11eb51
libceph: add support for CEPH_CRYPTO_AES256KRB5

This is based on AES256-CTS-HMAC384-192 crypto algorithm per RFC 8009
(i.e. Kerberos 5, hence the name) with custom-defined key usage numbers.
The implementation allows a given key to have/be linked to between one
and three usage numbers.

The existing CEPH_CRYPTO_AES remains in place and unchanged.  The
usage_slot parameter that needed to be added to ceph_crypt() and its
wrappers is simply ignored there.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
include/linux/ceph/ceph_fs.h
net/ceph/Kconfig
net/ceph/auth_x.c
net/ceph/auth_x_protocol.h
net/ceph/crypto.c
net/ceph/crypto.h