diff options
| author | Kirill Marinushkin <k.marinushkin@gmail.com> | 2016-04-12 20:54:58 +0200 |
|---|---|---|
| committer | David Howells <dhowells@redhat.com> | 2016-04-12 20:54:58 +0200 |
| commit | 13100a72f40f5748a04017e0ab3df4cf27c809ef (patch) | |
| tree | 71d7421ab174d63edb7fabc0d10571f028cc5a44 /security/keys/Kconfig | |
| parent | KEYS: user_update should use copy of payload made during preparsing (diff) | |
| download | linux-13100a72f40f5748a04017e0ab3df4cf27c809ef.tar.xz linux-13100a72f40f5748a04017e0ab3df4cf27c809ef.zip | |
Security: Keys: Big keys stored encrypted
Solved TODO task: big keys saved to shmem file are now stored encrypted.
The encryption key is randomly generated and saved to payload[big_key_data].
Signed-off-by: Kirill Marinushkin <k.marinushkin@gmail.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'security/keys/Kconfig')
| -rw-r--r-- | security/keys/Kconfig | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/security/keys/Kconfig b/security/keys/Kconfig index fe4d74e126a7..45828095080d 100644 --- a/security/keys/Kconfig +++ b/security/keys/Kconfig @@ -41,6 +41,10 @@ config BIG_KEYS bool "Large payload keys" depends on KEYS depends on TMPFS + select CRYPTO + select CRYPTO_AES + select CRYPTO_ECB + select CRYPTO_RNG help This option provides support for holding large keys within the kernel (for example Kerberos ticket caches). The data may be stored out to |