mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-06 00:10:04 +01:00
b867f0b578
The crypt_keyslot_add_by_keyslot_context & associated helper functions allow more options when adding new keyslot. For example there was no simple way of adding new LUKS2 keyslot when the only active keyslot could be unlocked by passphrase (KEK) provided by LUKS2 token (plugin). Now all available options for unlocking keyslots may also be used when creating new keyslot and it combine as called needs. The available methods (keyslot contexts) are: passphrase, keyfile, key (binary representation) and LUSK2 token.
113 lines
2.9 KiB
C
113 lines
2.9 KiB
C
/*
|
|
* LUKS - Linux Unified Key Setup, keyslot unlock helpers
|
|
*
|
|
* Copyright (C) 2022 Red Hat, Inc. All rights reserved.
|
|
* Copyright (C) 2022 Ondrej Kozina
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
|
|
#ifndef KEYSLOT_CONTEXT_H
|
|
#define KEYSLOT_CONTEXT_H
|
|
|
|
#include <stdbool.h>
|
|
#include <stdint.h>
|
|
|
|
#include "internal.h"
|
|
|
|
typedef int (*keyslot_context_get_key) (
|
|
struct crypt_device *cd,
|
|
struct crypt_keyslot_context *kc,
|
|
int keyslot,
|
|
int segment,
|
|
struct volume_key **r_vk);
|
|
|
|
typedef int (*keyslot_context_get_volume_key) (
|
|
struct crypt_device *cd,
|
|
struct crypt_keyslot_context *kc,
|
|
int keyslot,
|
|
struct volume_key **r_vk);
|
|
|
|
typedef int (*keyslot_context_get_passphrase) (
|
|
struct crypt_device *cd,
|
|
struct crypt_keyslot_context *kc,
|
|
const char **r_passphrase,
|
|
size_t *r_passphrase_size);
|
|
|
|
/* crypt_keyslot_context */
|
|
struct crypt_keyslot_context {
|
|
int type;
|
|
|
|
union {
|
|
struct {
|
|
const char *passphrase;
|
|
size_t passphrase_size;
|
|
} p;
|
|
struct {
|
|
const char *keyfile;
|
|
uint64_t keyfile_offset;
|
|
size_t keyfile_size;
|
|
} kf;
|
|
struct {
|
|
int id;
|
|
const char *type;
|
|
const char *pin;
|
|
size_t pin_size;
|
|
void *usrptr;
|
|
} t;
|
|
struct {
|
|
const char *volume_key;
|
|
size_t volume_key_size;
|
|
} k;
|
|
} u;
|
|
|
|
int error;
|
|
|
|
struct volume_key *i_vk;
|
|
char *i_passphrase;
|
|
size_t i_passphrase_size;
|
|
|
|
keyslot_context_get_key get_luks2_key;
|
|
keyslot_context_get_volume_key get_luks1_volume_key;
|
|
keyslot_context_get_volume_key get_luks2_volume_key;
|
|
keyslot_context_get_passphrase get_passphrase;
|
|
};
|
|
|
|
void crypt_keyslot_context_destroy_internal(struct crypt_keyslot_context *method);
|
|
|
|
void crypt_keyslot_unlock_by_key_init_internal(struct crypt_keyslot_context *kc,
|
|
const char *volume_key,
|
|
size_t volume_key_size);
|
|
|
|
void crypt_keyslot_unlock_by_passphrase_init_internal(struct crypt_keyslot_context *kc,
|
|
const char *passphrase,
|
|
size_t passphrase_size);
|
|
|
|
void crypt_keyslot_unlock_by_keyfile_init_internal(struct crypt_keyslot_context *kc,
|
|
const char *keyfile,
|
|
size_t keyfile_size,
|
|
uint64_t keyfile_offset);
|
|
|
|
void crypt_keyslot_unlock_by_token_init_internal(struct crypt_keyslot_context *kc,
|
|
int token,
|
|
const char *type,
|
|
const char *pin,
|
|
size_t pin_size,
|
|
void *usrptr);
|
|
|
|
const char *keyslot_context_type_string(const struct crypt_keyslot_context *kc);
|
|
|
|
#endif /* KEYSLOT_CONTEXT_H */
|