mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-05 16:00:05 +01:00
6ee76934fa
The volume key structure may often be in configuration where 'key' member does not contain real data. Some examples: - volume key acquired by querring device-mapper where key was originaly passed by kernel keyring reference. - volume key allocated by crypt_alloc_volume_key(size, NULL) With this patch access to internal 'uninitialized' data result in failed assert(). For use cases where key data are not needed (keyring reference wrapper, key length info only) we do not have to allocate and lock the safe buffer in memory. Further improvements might to completely hide the volume key internals and access only via setter and getter functions.
61 lines
1.3 KiB
C
61 lines
1.3 KiB
C
// SPDX-License-Identifier: LGPL-2.1-or-later
|
|
/*
|
|
* FVAULT2 (FileVault2-compatible) volume handling
|
|
*
|
|
* Copyright (C) 2021-2022 Pavel Tobias
|
|
*/
|
|
|
|
#ifndef _CRYPTSETUP_FVAULT2_H
|
|
#define _CRYPTSETUP_FVAULT2_H
|
|
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
|
|
#define FVAULT2_WRAPPED_KEY_SIZE 24
|
|
#define FVAULT2_PBKDF2_SALT_SIZE 16
|
|
#define FVAULT2_UUID_LEN 37
|
|
|
|
struct crypt_device;
|
|
struct volume_key;
|
|
|
|
struct fvault2_params {
|
|
const char *cipher;
|
|
const char *cipher_mode;
|
|
uint16_t key_size;
|
|
uint32_t pbkdf2_iters;
|
|
char pbkdf2_salt[FVAULT2_PBKDF2_SALT_SIZE];
|
|
char wrapped_kek[FVAULT2_WRAPPED_KEY_SIZE];
|
|
char wrapped_vk[FVAULT2_WRAPPED_KEY_SIZE];
|
|
char family_uuid[FVAULT2_UUID_LEN];
|
|
char ph_vol_uuid[FVAULT2_UUID_LEN];
|
|
uint64_t log_vol_off;
|
|
uint64_t log_vol_size;
|
|
};
|
|
|
|
int FVAULT2_read_metadata(
|
|
struct crypt_device *cd,
|
|
struct fvault2_params *params);
|
|
|
|
int FVAULT2_get_volume_key(
|
|
struct crypt_device *cd,
|
|
const char *passphrase,
|
|
size_t passphrase_len,
|
|
const struct fvault2_params *params,
|
|
struct volume_key **r_vol_key);
|
|
|
|
int FVAULT2_dump(
|
|
struct crypt_device *cd,
|
|
struct device *device,
|
|
const struct fvault2_params *params);
|
|
|
|
int FVAULT2_activate_by_volume_key(
|
|
struct crypt_device *cd,
|
|
const char *name,
|
|
struct volume_key *vk,
|
|
const struct fvault2_params *params,
|
|
uint32_t flags);
|
|
|
|
size_t FVAULT2_volume_key_size(void);
|
|
|
|
#endif
|