uapi/asm/pkey.h

27 #define MAXAESCIPHERKEYSIZE 136  /* our aes cipher keys have always 136 bytes */
28 #define MINEP11AESKEYBLOBSIZE 256  /* min EP11 AES key blob size  */
29 #define MAXEP11AESKEYBLOBSIZE 336  /* max EP11 AES key blob size */
67 /* keygenflags defines for CCA AES cipher keys */
83 /* Struct to hold a CCA AES secure key blob */
95 /* Struct to hold an AES clear key value */
115  * Generate CCA AES secure key.
126  * Construct CCA AES secure key from clear key value
138  * Fabricate AES protected key from a CCA AES secure key
149  * Fabricate AES protected key from clear key value
160  * Verification Pattern provided inside a CCA AES secure key.
179  * Verify the given CCA AES secure key for being able to be usable with
184  * only AES), flag if key is wrapped with an old MKVP.
194 #define PKEY_VERIFY_ATTR_AES	   0x00000001  /* key is an AES key */
198  * Generate AES random protected key.
208  * Verify an AES protected key.
228  * Generate CCA AES secure key, CCA AES cipher key or EP11 AES secure key.
242  * The keygenflag argument for generating an EP11 AES key should either be 0
260  * Construct an CCA AES secure key, CCA AES cipher key or EP11 AES secure
275  * The keygenflag argument for generating an EP11 AES key should either be 0
300  * For CCA AES secure keys and CCA AES cipher keys this means to check
307  * CCA AES secure keys are also checked to have the CPACF export allowed
353  * Is able to find out which type of secure key is given (CCA AES secure
354  * key, CCA AES cipher key, CCA ECC private key, EP11 AES key, EP11 ECC private
356  * other criteria (like CCA AES cipher keys need a CEX5C or higher, EP11 keys
393  * cipher key) the first 8 bytes of cur_mkvp refer to the current AES mkvp value
394  * of the apqn and the first 8 bytes of the alt_mkvp refer to the old AES mkvp.