• Milan Broz's avatar
    dm crypt: make wipe message also wipe essiv key · 542da317
    Milan Broz authored
    The "wipe key" message is used to wipe the volume key from memory
    temporarily, for example when suspending to RAM.
    
    But the initialisation vector in ESSIV mode is calculated from the
    hashed volume key, so the wipe message should wipe this IV key too and
    reinitialise it when the volume key is reinstated.
    
    This patch adds an IV wipe method called from a wipe message callback.
    ESSIV is then reinitialised using the init function added by the
    last patch.
    
    Cc: stable@kernel.org
    Signed-off-by: default avatarMilan Broz <mbroz@redhat.com>
    Signed-off-by: default avatarAlasdair G Kergon <agk@redhat.com>
    542da317
dm-crypt.c 32.8 KB