f12c41bf40
Using crypto devs requires the user to log in and the supplied DEK to be encrypted with a KEK (keys encryption key). KEK is burned once on the nic, along with credentials for users, and for a user to log in, he is needed to supply his creds wrapped with the KEK. A device comes out of the Mellanox factory with a pre-defined import method for each algorithm. The defined method could be wrapped mode, so the device can be used as described above, or plaintext mode, without the need to log in and wrap supplied DEKs. Support crypto operations with the plaintext import method. Signed-off-by: Raja Zidane <rzidane@nvidia.com> Acked-by: Matan Azrad <matan@nvidia.com> |
||
|---|---|---|
| .. | ||
| cnxk | ||
| cpt | ||
| dpaax | ||
| iavf | ||
| mlx5 | ||
| mvep | ||
| octeontx | ||
| qat | ||
| sfc_efx | ||
| meson.build | ||