s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes
authorHolger Dengler <dengler@linux.ibm.com>
Fri, 4 Aug 2023 14:02:58 +0000 (16:02 +0200)
committerHeiko Carstens <hca@linux.ibm.com>
Thu, 17 Aug 2023 13:18:53 +0000 (15:18 +0200)
commitb9352e4b9b9eff949bcc6907b8569b3a1d992f1e
tree8b5016032fc40d4d4856421cdd15a1a50d9a727a
parent745742dbca11a1b63684ec7032a81aaedcf51fb0
s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes

Commit 'fa6999e326fe ("s390/pkey: support CCA and EP11 secure ECC
private keys")' introduced a new PKEY_TYPE_EP11_AES securekey type as
a supplement to the existing PKEY_TYPE_EP11 (which won't work in
environments with session-bound keys). The pkey EP11 securekey
attributes use PKEY_TYPE_EP11_AES (instead of PKEY_TYPE_EP11)
keyblobs, to make the generated keyblobs usable also in environments,
where session-bound keys are required.

There should be no negative impacts to userspace because the internal
structure of the keyblobs is opaque. The increased size of the
generated keyblobs is reflected by the changed size of the attributes.

Fixes: fa6999e326fe ("s390/pkey: support CCA and EP11 secure ECC private keys")
Signed-off-by: Holger Dengler <dengler@linux.ibm.com>
Reviewed-by: Ingo Franzki <ifranzki@linux.ibm.com>
Signed-off-by: Heiko Carstens <hca@linux.ibm.com>
arch/s390/include/uapi/asm/pkey.h
drivers/s390/crypto/pkey_api.c