]> git.proxmox.com Git - mirror_qemu.git/commit - crypto/Makefile.objs
crypto: add support for PBKDF2 algorithm
authorDaniel P. Berrange <berrange@redhat.com>
Wed, 14 Oct 2015 12:14:04 +0000 (13:14 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Thu, 17 Mar 2016 14:41:07 +0000 (14:41 +0000)
commit37788f253a4a9ad5f27dae68aee261c784e1fa17
tree24b95c924f88bf059300342bbb2a9e172478f607
parentb917da4cbd13dae4cda3852d5bdf3725202103ab
crypto: add support for PBKDF2 algorithm

The LUKS data format includes use of PBKDF2 (Password-Based
Key Derivation Function). The Nettle library can provide
an implementation of this, but we don't want code directly
depending on a specific crypto library backend. Introduce
a new include/crypto/pbkdf.h header which defines a QEMU
API for invoking PBKDK2. The initial implementations are
backed by nettle & gcrypt, which are commonly available
with distros shipping GNUTLS.

The test suite data is taken from the cryptsetup codebase
under the LGPLv2.1+ license. This merely aims to verify
that whatever backend we provide for this function in QEMU
will comply with the spec.

Reviewed-by: Fam Zheng <famz@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
configure
crypto/Makefile.objs
crypto/pbkdf-gcrypt.c [new file with mode: 0644]
crypto/pbkdf-nettle.c [new file with mode: 0644]
crypto/pbkdf-stub.c [new file with mode: 0644]
crypto/pbkdf.c [new file with mode: 0644]
include/crypto/pbkdf.h [new file with mode: 0644]
tests/.gitignore
tests/Makefile
tests/test-crypto-pbkdf.c [new file with mode: 0644]