File Manager

003 File Manager

Current Path: /usr/src/sys/contrib/openzfs/include/sys

usr / src / sys / contrib / openzfs / include / sys /

📁 ..
📄 Makefile.am(2.18 KB)
📄 abd.h(4.25 KB)
📄 abd_impl.h(4.41 KB)
📄 aggsum.h(1.28 KB)
📄 arc.h(11.19 KB)
📄 arc_impl.h(33.15 KB)
📄 avl.h(9.16 KB)
📄 avl_impl.h(4.8 KB)
📄 bitops.h(3.2 KB)
📄 blkptr.h(914 B)
📄 bplist.h(1.6 KB)
📄 bpobj.h(3.21 KB)
📄 bptree.h(1.89 KB)
📄 bqueue.h(1.23 KB)
📄 btree.h(7.68 KB)
📁 crypto
📄 dataset_kstats.h(2.27 KB)
📄 dbuf.h(13.94 KB)
📄 ddt.h(7.96 KB)
📄 dmu.h(39.06 KB)
📄 dmu_impl.h(6.92 KB)
📄 dmu_objset.h(9.19 KB)
📄 dmu_recv.h(2.75 KB)
📄 dmu_redact.h(1.67 KB)
📄 dmu_send.h(2.54 KB)
📄 dmu_traverse.h(3.02 KB)
📄 dmu_tx.h(4.43 KB)
📄 dmu_zfetch.h(2.23 KB)
📄 dnode.h(22.41 KB)
📄 dsl_bookmark.h(5.05 KB)
📄 dsl_crypt.h(7.76 KB)
📄 dsl_dataset.h(18.62 KB)
📄 dsl_deadlist.h(4.21 KB)
📄 dsl_deleg.h(3.27 KB)
📄 dsl_destroy.h(2.19 KB)
📄 dsl_dir.h(7.67 KB)
📄 dsl_pool.h(6.23 KB)
📄 dsl_prop.h(4.38 KB)
📄 dsl_scan.h(7.11 KB)
📄 dsl_synctask.h(4.06 KB)
📄 dsl_userhold.h(1.84 KB)
📄 edonr.h(2.65 KB)
📄 efi_partition.h(16.28 KB)
📁 fm
📄 frame.h(935 B)
📁 fs
📄 hkdf.h(782 B)
📁 lua
📄 metaslab.h(5.48 KB)
📄 metaslab_impl.h(21.23 KB)
📄 mmp.h(2.37 KB)
📄 mntent.h(5.22 KB)
📄 mod.h(1.26 KB)
📄 multilist.h(3.27 KB)
📄 note.h(1.62 KB)
📄 nvpair.h(14.77 KB)
📄 nvpair_impl.h(2.23 KB)
📄 objlist.h(1.13 KB)
📄 pathname.h(2.12 KB)
📄 qat.h(5.86 KB)
📄 range_tree.h(9.73 KB)
📄 rrwlock.h(3.53 KB)
📄 sa.h(5.14 KB)
📄 sa_impl.h(8.29 KB)
📄 skein.h(6.69 KB)
📄 spa.h(46.07 KB)
📄 spa_boot.h(1.16 KB)
📄 spa_checkpoint.h(1.44 KB)
📄 spa_checksum.h(1.96 KB)
📄 spa_impl.h(18.25 KB)
📄 spa_log_spacemap.h(2.62 KB)
📄 space_map.h(8.7 KB)
📄 space_reftree.h(1.69 KB)
📁 sysevent
📄 sysevent.h(1.07 KB)
📄 txg.h(4.66 KB)
📄 txg_impl.h(4.77 KB)
📄 u8_textprep.h(3.59 KB)
📄 u8_textprep_data.h(1.41 MB)
📄 uberblock.h(1.36 KB)
📄 uberblock_impl.h(5.11 KB)
📄 uio_impl.h(1.58 KB)
📄 unique.h(1.56 KB)
📄 uuid.h(2.85 KB)
📄 vdev.h(8.18 KB)
📄 vdev_disk.h(1.65 KB)
📄 vdev_draid.h(3.43 KB)
📄 vdev_file.h(1.23 KB)
📄 vdev_impl.h(22.53 KB)
📄 vdev_indirect_births.h(2.31 KB)
📄 vdev_indirect_mapping.h(4.38 KB)
📄 vdev_initialize.h(1.39 KB)
📄 vdev_raidz.h(2.04 KB)
📄 vdev_raidz_impl.h(10.54 KB)
📄 vdev_rebuild.h(3.4 KB)
📄 vdev_removal.h(2.63 KB)
📄 vdev_trim.h(1.72 KB)
📄 xvattr.h(13.1 KB)
📄 zap.h(18.63 KB)
📄 zap_impl.h(6.79 KB)
📄 zap_leaf.h(7.84 KB)
📄 zcp.h(4.87 KB)
📄 zcp_global.h(742 B)
📄 zcp_iter.h(1.07 KB)
📄 zcp_prop.h(780 B)
📄 zcp_set.h(929 B)
📄 zfeature.h(2.42 KB)
📄 zfs_acl.h(8.08 KB)
📄 zfs_bootenv.h(1.41 KB)
📄 zfs_context.h(21.23 KB)
📄 zfs_debug.h(3.3 KB)
📄 zfs_delay.h(1.25 KB)
📄 zfs_file.h(2.06 KB)
📄 zfs_fuid.h(4.26 KB)
📄 zfs_ioctl.h(17.63 KB)
📄 zfs_ioctl_impl.h(3.1 KB)
📄 zfs_onexit.h(1.65 KB)
📄 zfs_project.h(2.35 KB)
📄 zfs_quota.h(1.57 KB)
📄 zfs_racct.h(1.12 KB)
📄 zfs_ratelimit.h(1.11 KB)
📄 zfs_refcount.h(4.15 KB)
📄 zfs_rlock.h(2.54 KB)
📄 zfs_sa.h(4.38 KB)
📄 zfs_stat.h(1.45 KB)
📄 zfs_sysfs.h(1.49 KB)
📄 zfs_vfsops.h(1.05 KB)
📄 zfs_vnops.h(2 KB)
📄 zfs_znode.h(10.93 KB)
📄 zil.h(18.27 KB)
📄 zil_impl.h(9.12 KB)
📄 zio.h(21.68 KB)
📄 zio_checksum.h(4.55 KB)
📄 zio_compress.h(5.91 KB)
📄 zio_crypt.h(5.21 KB)
📄 zio_impl.h(8.33 KB)
📄 zio_priority.h(1.2 KB)
📄 zrlock.h(1.7 KB)
📁 zstd
📄 zthr.h(1.23 KB)
📄 zvol.h(2.27 KB)
📄 zvol_impl.h(3.7 KB)

Editing: zio_crypt.h

/*
 * CDDL HEADER START
 *
 * This file and its contents are supplied under the terms of the
 * Common Development and Distribution License ("CDDL"), version 1.0.
 * You may only use this file in accordance with the terms of version
 * 1.0 of the CDDL.
 *
 * A full copy of the text of the CDDL should have accompanied this
 * source.  A copy of the CDDL is also available via the Internet at
 * http://www.illumos.org/license/CDDL.
 *
 * CDDL HEADER END
 */

/*
 * Copyright (c) 2017, Datto, Inc. All rights reserved.
 */

#ifndef	_SYS_ZIO_CRYPT_H
#define	_SYS_ZIO_CRYPT_H

#include <sys/dmu.h>
#include <sys/zfs_refcount.h>
#if defined(__FreeBSD__) && defined(_KERNEL)
#include <sys/freebsd_crypto.h>
#else
#include <sys/crypto/api.h>
#endif /* __FreeBSD__ */
#include <sys/nvpair.h>
#include <sys/avl.h>
#include <sys/zio.h>

/* forward declarations */
struct zbookmark_phys;

#define	WRAPPING_KEY_LEN	32
#define	WRAPPING_IV_LEN		ZIO_DATA_IV_LEN
#define	WRAPPING_MAC_LEN	ZIO_DATA_MAC_LEN
#define	MASTER_KEY_MAX_LEN	32
#define	SHA512_HMAC_KEYLEN	64

#define	ZIO_CRYPT_KEY_CURRENT_VERSION	1ULL

typedef enum zio_crypt_type {
	ZC_TYPE_NONE = 0,
	ZC_TYPE_CCM,
	ZC_TYPE_GCM
} zio_crypt_type_t;

/* table of supported crypto algorithms, modes and keylengths. */
typedef struct zio_crypt_info {
	/* mechanism name, needed by ICP */
#if defined(__FreeBSD__) && defined(_KERNEL)
	/*
	 * I've deliberately used a different name here, to catch
	 * ICP-using code.
	 */
	const char	*ci_algname;
#else
	crypto_mech_name_t ci_mechname;
#endif
	/* cipher mode type (GCM, CCM) */
	zio_crypt_type_t ci_crypt_type;

/* length of the encryption key */
	size_t ci_keylen;

/* human-readable name of the encryption algorithm */
	char *ci_name;
} zio_crypt_info_t;

extern zio_crypt_info_t zio_crypt_table[ZIO_CRYPT_FUNCTIONS];

/* in memory representation of an unwrapped key that is loaded into memory */
typedef struct zio_crypt_key {
	/* encryption algorithm */
	uint64_t zk_crypt;

/* on-disk format version */
	uint64_t zk_version;

/* GUID for uniquely identifying this key. Not encrypted on disk. */
	uint64_t zk_guid;

/* buffer for master key */
	uint8_t zk_master_keydata[MASTER_KEY_MAX_LEN];

/* buffer for hmac key */
	uint8_t zk_hmac_keydata[SHA512_HMAC_KEYLEN];

/* buffer for current encryption key derived from master key */
	uint8_t zk_current_keydata[MASTER_KEY_MAX_LEN];

/* current 64 bit salt for deriving an encryption key */
	uint8_t zk_salt[ZIO_DATA_SALT_LEN];

/* count of how many times the current salt has been used */
	uint64_t zk_salt_count;

/* illumos crypto api current encryption key */
	crypto_key_t zk_current_key;

#if defined(__FreeBSD__) && defined(_KERNEL)
	/* Session for current encryption key.  Must always be set */
	freebsd_crypt_session_t	zk_session;
#else
	/* template of current encryption key for illumos crypto api */
	crypto_ctx_template_t zk_current_tmpl;
#endif

/* illumos crypto api current hmac key */
	crypto_key_t zk_hmac_key;

/* template of hmac key for illumos crypto api */
	crypto_ctx_template_t zk_hmac_tmpl;

/* lock for changing the salt and dependent values */
	krwlock_t zk_salt_lock;
} zio_crypt_key_t;

void zio_crypt_key_destroy(zio_crypt_key_t *key);
int zio_crypt_key_init(uint64_t crypt, zio_crypt_key_t *key);
int zio_crypt_key_get_salt(zio_crypt_key_t *key, uint8_t *salt_out);

int zio_crypt_key_wrap(crypto_key_t *cwkey, zio_crypt_key_t *key, uint8_t *iv,
    uint8_t *mac, uint8_t *keydata_out, uint8_t *hmac_keydata_out);
int zio_crypt_key_unwrap(crypto_key_t *cwkey, uint64_t crypt, uint64_t version,
    uint64_t guid, uint8_t *keydata, uint8_t *hmac_keydata, uint8_t *iv,
    uint8_t *mac, zio_crypt_key_t *key);
int zio_crypt_generate_iv(uint8_t *ivbuf);
int zio_crypt_generate_iv_salt_dedup(zio_crypt_key_t *key, uint8_t *data,
    uint_t datalen, uint8_t *ivbuf, uint8_t *salt);

void zio_crypt_encode_params_bp(blkptr_t *bp, uint8_t *salt, uint8_t *iv);
void zio_crypt_decode_params_bp(const blkptr_t *bp, uint8_t *salt, uint8_t *iv);
void zio_crypt_encode_mac_bp(blkptr_t *bp, uint8_t *mac);
void zio_crypt_decode_mac_bp(const blkptr_t *bp, uint8_t *mac);
void zio_crypt_encode_mac_zil(void *data, uint8_t *mac);
void zio_crypt_decode_mac_zil(const void *data, uint8_t *mac);
void zio_crypt_copy_dnode_bonus(abd_t *src_abd, uint8_t *dst, uint_t datalen);

int zio_crypt_do_indirect_mac_checksum(boolean_t generate, void *buf,
    uint_t datalen, boolean_t byteswap, uint8_t *cksum);
int zio_crypt_do_indirect_mac_checksum_abd(boolean_t generate, abd_t *abd,
    uint_t datalen, boolean_t byteswap, uint8_t *cksum);
int zio_crypt_do_hmac(zio_crypt_key_t *key, uint8_t *data, uint_t datalen,
    uint8_t *digestbuf, uint_t digestlen);
int zio_crypt_do_objset_hmacs(zio_crypt_key_t *key, void *data, uint_t datalen,
    boolean_t byteswap, uint8_t *portable_mac, uint8_t *local_mac);
int zio_do_crypt_data(boolean_t encrypt, zio_crypt_key_t *key,
    dmu_object_type_t ot, boolean_t byteswap, uint8_t *salt, uint8_t *iv,
    uint8_t *mac, uint_t datalen, uint8_t *plainbuf, uint8_t *cipherbuf,
    boolean_t *no_crypt);
int zio_do_crypt_abd(boolean_t encrypt, zio_crypt_key_t *key,
    dmu_object_type_t ot, boolean_t byteswap, uint8_t *salt, uint8_t *iv,
    uint8_t *mac, uint_t datalen, abd_t *pabd, abd_t *cabd,
    boolean_t *no_crypt);

#endif

003 File Manager

Editing: zio_crypt.h

Upload File

Create Folder