• Home
  • Raw
  • Download

Lines Matching full:encrypted

2 Trusted and Encrypted Keys
5 Trusted and Encrypted Keys are two new key types added to the existing kernel
8 stores, and loads only encrypted blobs. Trusted Keys require the availability
9 of a Trust Source for greater security, while Encrypted Keys can be used on any
109 New keys are created from random numbers. They are encrypted/decrypted using
135 Encrypted Keys
138 Encrypted keys do not depend on a trust source, and are faster, as they use AES
140 random numbers or user-provided decrypted data, and are encrypted/decrypted
142 user-key type. The main disadvantage of encrypted keys is that if they are not
234 Encrypted Keys usage
237 The decrypted portion of encrypted keys can contain either a simple symmetric
243 keyctl add encrypted name "new [format] key-type:master-key-name keylen"
245 keyctl add encrypted name "new [format] key-type:master-key-name keylen
247 keyctl add encrypted name "load hex_blob" ring
255 Examples of trusted and encrypted key usage
322 encrypted key "evm" using the above trusted key "kmk":
326 $ keyctl add encrypted evm "new trusted:kmk 32" @u
331 $ keyctl add encrypted evm "new default trusted:kmk 32" @u
341 Load an encrypted key "evm" from saved blob::
343 $ keyctl add encrypted evm "load `cat evm.blob`" @u
351 Instantiate an encrypted key "evm" using user-provided decrypted data::
354 $ keyctl add encrypted evm "new default user:kmk 32 $evmkey" @u
362 Other uses for trusted and encrypted keys, such as for disk and file encryption
364 in order to use encrypted keys to mount an eCryptfs filesystem. More details
368 Another new format 'enc32' has been defined in order to support encrypted keys