]> git.ipfire.org Git - thirdparty/linux.git/commit
dm-inlinecrypt: add support for hardware-wrapped keys
authorLinlin Zhang <linlin.zhang@oss.qualcomm.com>
Mon, 25 May 2026 12:13:48 +0000 (05:13 -0700)
committerMikulas Patocka <mpatocka@redhat.com>
Mon, 25 May 2026 15:56:56 +0000 (17:56 +0200)
commitf9f57971da38afbcfa82a9502fb3eb5f1f100e73
tree077282f5c50f9582fceb5fdf9db25c28b0b530cc
parent5aa0f9231cbacade065cedd8e9b5ebd067231171
dm-inlinecrypt: add support for hardware-wrapped keys

Add support for hardware-wrapped encryption keys to the
dm-inlinecrypt target.

Introduce a new optional argument <key_type> to indicate
whether the provided key is a raw key or a hardware-wrapped
key. Based on this flag, the appropriate blk-crypto key type
is selected when initializing the key.

This allows dm-inlinecrypt to work with hardware that requires
keys to be wrapped and managed by the underlying inline
encryption engine.

Update the target argument parsing accordingly and pass the
key type to blk_crypto_init_key(). Documentation is also
updated to reflect the new parameter and usage.

Signed-off-by: Linlin Zhang <linlin.zhang@oss.qualcomm.com>
Signed-off-by: Mikulas Patocka <mpatocka@redhat.com>
Fixes: e7f57d2c47e2 ("dm-inlinecrypt: add target for inline block device encryption")
Documentation/admin-guide/device-mapper/dm-inlinecrypt.rst
drivers/md/dm-inlinecrypt.c