• Martin Schwidefsky's avatar
    s390/crypt: Add protected key AES module · 27937843
    Martin Schwidefsky authored
    This patch introduces a new in-kernel-crypto blockcipher
    called 'paes' which implements AES with protected keys.
    The paes blockcipher can be used similar to the aes
    blockcipher but uses secure key material to derive the
    working protected key and so offers an encryption
    implementation where never a clear key value is exposed
    in memory.
    
    The paes module is only available for the s390 platform
    providing a minimal hardware support of CPACF enabled
    with at least MSA level 3. Upon module initialization
    these requirements are checked.
    
    Includes additional contribution from Harald Freudenberger.
    Signed-off-by: default avatarMartin Schwidefsky <schwidefsky@de.ibm.com>
    27937843
Kconfig 16.8 KB