Commit ed6f76b4 authored by Tony Krowiak's avatar Tony Krowiak Committed by Christian Borntraeger

KVM: s390/cpacf: Enable key wrapping by default

z/VM and LPAR enable key wrapping by default, lets do the same on KVM.
Signed-off-by: default avatarTony Krowiak <akrowiak@linux.vnet.ibm.com>
Signed-off-by: default avatarChristian Borntraeger <borntraeger@de.ibm.com>
parent c517d838
...@@ -839,9 +839,13 @@ static int kvm_s390_crypto_init(struct kvm *kvm) ...@@ -839,9 +839,13 @@ static int kvm_s390_crypto_init(struct kvm *kvm)
kvm_s390_set_crycb_format(kvm); kvm_s390_set_crycb_format(kvm);
/* Disable AES/DEA protected key functions by default */ /* Enable AES/DEA protected key functions by default */
kvm->arch.crypto.aes_kw = 0; kvm->arch.crypto.aes_kw = 1;
kvm->arch.crypto.dea_kw = 0; kvm->arch.crypto.dea_kw = 1;
get_random_bytes(kvm->arch.crypto.crycb->aes_wrapping_key_mask,
sizeof(kvm->arch.crypto.crycb->aes_wrapping_key_mask));
get_random_bytes(kvm->arch.crypto.crycb->dea_wrapping_key_mask,
sizeof(kvm->arch.crypto.crycb->dea_wrapping_key_mask));
return 0; return 0;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment