security/keys/trusted-encrypted.rst

268     keyctl add trusted name "new keylen [options]" ring
269     keyctl add trusted name "load hex_blob [pcrlock=pcrnum]" ring
270     keyctl update key "update [options]"
271     keyctl print keyid
295 "keyctl print" returns an ascii hex copy of the sealed key, which is in standard
305     keyctl add trusted name "new keylen" ring
306     keyctl add trusted name "load hex_blob" ring
307     keyctl print keyid
309 "keyctl print" returns an ASCII hex copy of the sealed key, which is in format
318     keyctl add trusted name "new keylen" ring
319     keyctl add trusted name "load hex_blob" ring
320     keyctl print keyid
322 "keyctl print" returns an ASCII hex copy of the sealed key, which is in a
328     keyctl add trusted name "new keylen pk [options]" ring
329     keyctl add trusted name "load hex_blob [options]" ring
330     keyctl print keyid
337 "keyctl print" returns an ASCII hex copy of the sealed key, which is in a
346     keyctl add trusted name "new keylen" ring
347     keyctl add trusted name "load hex_blob" ring
348     keyctl print keyid
350 "keyctl print" returns an ASCII hex copy of the sealed key, which is in format
359     keyctl add trusted name "new keylen [options]" ring
360     keyctl add trusted name "load hex_blob" ring
361     keyctl print keyid
370 "keyctl print" returns an ASCII hex copy of the sealed key, which is in format
383     keyctl add encrypted name "new [format] key-type:master-key-name keylen"
385     keyctl add encrypted name "new [format] key-type:master-key-name keylen
387     keyctl add encrypted name "load hex_blob" ring
388     keyctl update keyid "update key-type:master-key-name"
406     $ keyctl add trusted kmk "new 32" @u
409     $ keyctl show
415     $ keyctl print 440502848
425     $ keyctl pipe 440502848 > kmk.blob
429     $ keyctl add trusted kmk "load `cat kmk.blob`" @u
432     $ keyctl print 268728824
446     $ keyctl add trusted kmk "new 32 pk key_enc_algo=1" @u
449     $ keyctl show
455     $ keyctl print 440502848
465     $ keyctl pipe 440502848 > kmk.blob
469     $ keyctl add trusted kmk "load `cat kmk.blob` key_enc_algo=1" @u
472     $ keyctl print 268728824
484     $ keyctl update 268728824 "update pcrinfo=`cat pcr.blob`"
485     $ keyctl print 268728824
506     $ keyctl add encrypted evm "new trusted:kmk 32" @u
511     $ keyctl add encrypted evm "new default trusted:kmk 32" @u
514     $ keyctl print 159771175
519     $ keyctl pipe 159771175 > evm.blob
523     $ keyctl add encrypted evm "load `cat evm.blob`" @u
526     $ keyctl print 831684262
534     $ keyctl add encrypted evm "new default user:kmk 32 $evmkey" @u
537     $ keyctl print 794890253