]> git.ipfire.org Git - thirdparty/mdadm.git/commit
Add reading Opal NVMe encryption information
authorBlazej Kucman <blazej.kucman@intel.com>
Fri, 22 Mar 2024 11:51:16 +0000 (12:51 +0100)
committerMariusz Tkaczyk <mariusz.tkaczyk@linux.intel.com>
Tue, 2 Apr 2024 06:27:47 +0000 (08:27 +0200)
commitcc48406887b3bc439e3462e8e4d20f992e81b87e
treef84b32c8d92d9f395bb1e5281c0e6534fd04d1ec
parentcc75b0faaa016e54d569486c9a7abe6c39cb883a
Add reading Opal NVMe encryption information

For NVMe devices with Opal support, encryption information, status and
ability are determined based on Opal Level 0 discovery response. Technical
documentation used is given in the implementation.

Ability in general describes what type of encryption is supported, Status
describes in what state the disk with encryption support is. The current
patch includes only the implementation of reading encryption information,
functions will be used in one of the next patches.

Motivation for adding this functionality is to block mixing of disks in
IMSM arrays with encryption enabled and disabled. The main goal is to not
allow stealing data by rebuilding array to not encrypted drive which can be
read elsewhere.

Value ENA_OTHER from enum encryption_ability will be used in the next
patch.

Signed-off-by: Blazej Kucman <blazej.kucman@intel.com>
Signed-off-by: Mariusz Tkaczyk <mariusz.tkaczyk@linux.intel.com>
Makefile
drive_encryption.c [new file with mode: 0644]
drive_encryption.h [new file with mode: 0644]