2  * f2fscrypt.c - f2fs encryption management utility
79 #define KEY_SPEC_THREAD_KEYRING		-1
80 #define KEY_SPEC_PROCESS_KEYRING	-2
81 #define KEY_SPEC_SESSION_KEYRING	-3
82 #define KEY_SPEC_USER_KEYRING		-4
83 #define KEY_SPEC_USER_SESSION_KEYRING	-5
84 #define KEY_SPEC_GROUP_KEYRING		-6
208 		return -EINVAL;  in hex2byte()
212 			return -EINVAL;  in hex2byte()
215 			return -EINVAL;  in hex2byte()
217 			return -EINVAL;  in hex2byte()
218 		bytes[x >> 1] = (((unsigned char)(h - hexchars) << 4) +  in hex2byte()
219 				 (unsigned char)(l - hexchars));  in hex2byte()
245 		if ((p->salt_len == salt_len) &&  in find_by_salt()
246 		    !memcmp(p->salt, salt, salt_len))  in find_by_salt()
282 	exit(-1);  in die_signal_handler()
337 		if (fd == -1 && errno == ENOTDIR)  in parse_salt()
339 		if (fd == -1) {  in parse_salt()
374 				(((unsigned char)(h - hexchars) << 4) +  in parse_salt()
375 				 (unsigned char)(l - hexchars));  in parse_salt()
411 		if (fd == -1) {  in set_policy()
435 		memcpy(policy.master_key_descriptor, salt->key_desc,  in set_policy()
443 			       strerror(errno), salt->key_ref_str, argv[x]);  in set_policy()
447 		       salt->key_ref_str, argv[x]);  in set_policy()
451 static void pbkdf2_sha512(const char *passphrase, struct salt *salt,  in pbkdf2_sha512()  argument
455 	size_t passphrase_size = strlen(passphrase);  in pbkdf2_sha512()
467 		printf("Passphrase size is %zd; max is %d.\n", passphrase_size,  in pbkdf2_sha512()
471 	if (salt->salt_len > F2FS_MAX_SALT_SIZE) {  in pbkdf2_sha512()
472 		printf("Salt size is %zd; max is %d.\n", salt->salt_len,  in pbkdf2_sha512()
478 	memcpy(saltbuf, salt->salt, salt->salt_len);  in pbkdf2_sha512()
479 	memcpy(&saltbuf[F2FS_MAX_SALT_SIZE], passphrase, passphrase_size);  in pbkdf2_sha512()
481 	memcpy(&buf[SHA512_LENGTH], passphrase, passphrase_size);  in pbkdf2_sha512()
488 			 * buf: [previous hash || passphrase]  in pbkdf2_sha512()
514 static void get_passphrase(char *passphrase, int len)  in get_passphrase()  argument
521 	p = fgets(passphrase, len, stdin);  in get_passphrase()
528 	p = strrchr(passphrase, '\n');  in get_passphrase()
530 		p = passphrase + len - 1;  in get_passphrase()
563 	 * kernel to create a session keyring --- which wil then get  in get_keyring_id()
594 	f2fs_sha512(salt->key, F2FS_MAX_KEY_SIZE, key_ref1);  in generate_key_ref_str()
596 	memcpy(salt->key_desc, key_ref2, F2FS_KEY_DESCRIPTOR_SIZE);  in generate_key_ref_str()
598 		sprintf(&salt->key_ref_str[x * 2], "%02x",  in generate_key_ref_str()
599 			salt->key_desc[x]);  in generate_key_ref_str()
601 	salt->key_ref_str[F2FS_KEY_REF_STR_BUF_SIZE - 1] = '\0';  in generate_key_ref_str()
617 		salt->key_ref_str);  in insert_key_into_keyring()
620 	if (rc != -1) {  in insert_key_into_keyring()
623 			       salt->key_ref_str);  in insert_key_into_keyring()
625 	} else if ((rc == -1) && (errno != ENOKEY)) {  in insert_key_into_keyring()
627 		if (errno == -EINVAL)  in insert_key_into_keyring()
632 	memcpy(key.raw, salt->key, F2FS_MAX_KEY_SIZE);  in insert_key_into_keyring()
636 	if (rc == -1) {  in insert_key_into_keyring()
641 			       "%s\n", salt->key_ref_str, strerror(errno));  in insert_key_into_keyring()
647 			       salt->key_ref_str);  in insert_key_into_keyring()
657 		if (strcmp(mnt->mnt_type, "f2fs") ||  in get_default_salts()
658 		    access(mnt->mnt_dir, R_OK))  in get_default_salts()
660 		parse_salt(mnt->mnt_dir, PARSE_FLAGS_NOTSUPP_OK);  in get_default_salts()
681 "f2fscrypt add_key -S salt [ -k keyring ] [-v] [-q] [ path ... ]\n\n" \
682 "Prompts the user for a passphrase and inserts it into the specified\n" \
696 	while ((opt = getopt(argc, argv, "k:S:p:vq")) != -1) {  in do_add_key()
706 			/* Salt value for passphrase. */  in do_add_key()
719 			fputs(cmd->cmd_help, stderr);  in do_add_key()
732 	printf("Enter passphrase (echo disabled): ");  in do_add_key()
736 			      F2FS_PBKDF2_ITERATIONS, salt->key);  in do_add_key()
771 		fputs(cmd->cmd_help, stderr);  in do_set_policy()
779 		       "are 0-9 and a-f, lower case.  "  in do_set_policy()
804 		fputs(cmd->cmd_help, stderr);  in do_get_policy()
815 		if (fd == -1) {  in do_get_policy()
848 		fputs(cmd->cmd_help, stderr);  in do_new_session()
882 		for (p = cmd_list; p->cmd_name; p++) {  in do_help()
883 			if (p->cmd_flags & CMD_HIDDEN)  in do_help()
885 			if (strcmp(p->cmd_name, argv[1]) == 0) {  in do_help()
888 				fputs(p->cmd_help, stdout);  in do_help()
896 	for (p = cmd_list; p->cmd_name; p++) {  in do_help()
897 		if (p->cmd_flags & CMD_HIDDEN)  in do_help()
899 		printf("  %-20s %s\n", p->cmd_name, p->cmd_desc);  in do_help()
914 	for (cmd = cmd_list; cmd->cmd_name; cmd++) {  in main()
915 		if (strcmp(cmd->cmd_name, argv[1]) == 0) {  in main()
916 			cmd->cmd_func(argc-1, argv+1, cmd);  in main()