tree 009501aa3f2e1ea73a2188c8e34f7fe4dd9f523f
parent 8693b9145b13dc44664602cd4cbe71862c26d0b5
author Martin Schwidefsky <schwidefsky@de.ibm.com> 1478257035 +0100
committer Martin Schwidefsky <schwidefsky@de.ibm.com> 1487921504 +0100

s390/crypt: Add protected key AES module

This patch introduces a new in-kernel-crypto blockcipher
called 'paes' which implements AES with protected keys.
The paes blockcipher can be used similar to the aes
blockcipher but uses secure key material to derive the
working protected key and so offers an encryption
implementation where never a clear key value is exposed
in memory.

The paes module is only available for the s390 platform
providing a minimal hardware support of CPACF enabled
with at least MSA level 3. Upon module initialization
these requirements are checked.

Includes additional contribution from Harald Freudenberger.

Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>