Ondrej Kozina 0b849985b2 Do not wipe keys for wrapped key enabled ciphers. ...

We can't wipe (overwrite with random noise) wrapped key in
kernel. Such keys are usually structured and not only random
bytes.

Also it doesn't make sense to wipe these keys. They are supposed
to be protected (encrypted) by keys sealed in hardware.

TODO: tests: 1) with header, 2) without header (dm-crypt only),
      3) arch with working paes cipher (at least).

2018-04-15 15:44:17 +02:00

112 KiB

Raw Blame History

View Raw