keyring: pass module in spdk_keyring_remove_key()

This ensures that the key will only be removed if the module matches the
module owning the key. Also, while here, make this function return a
statu

keyring: pass module in spdk_keyring_remove_key()

This ensures that the key will only be removed if the module matches the
module owning the key. Also, while here, make this function return a
status indicating whether the key was removed successfully.

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: Iaabf863edd87863ddcb4b9b23831672b10eedb07
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/24807
Reviewed-by: Aleksey Marchuk <alexeymar@nvidia.com>
Community-CI: Mellanox Build Bot
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Jim Harris <jim.harris@samsung.com>

show more ...

keyring: add RPC for listing available keys

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I4f9f6753fa616bc1c61abb43656f95c91abf3120
Reviewed-on: https://review.spdk.io/gerrit/c

keyring: add RPC for listing available keys

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I4f9f6753fa616bc1c61abb43656f95c91abf3120
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/21739
Reviewed-by: Jim Harris <jim.harris@samsung.com>
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Aleksey Marchuk <alexeymar@nvidia.com>

show more ...

lib: add keyring library

The purpose of this library is to provide other libraries with an
interface for retrieving cryptographic keys. This interface consists of
functions managing the keyring (ad

lib: add keyring library

The purpose of this library is to provide other libraries with an
interface for retrieving cryptographic keys. This interface consists of
functions managing the keyring (add/remove), keeping track of key
references (get/put), and a set of callbacks used to define modules
responsible for providing access to the keys in a secure manner.

Key objects (called spdk_key) are identified by a unique name. They
don't hold the keying material themselves, but only act as references to
the actual key. Once the key is needed to perform a crypto operation,
this reference is used to retrieve keying material. These objects are
refcounted, so it is safe to remove a key from the keyring while it's
still in use. If that happens, the spdk_key object remains valid, but
it cannot be used to obtain the key (i.e. spdk_key_get_key() will result
in -ENOKEY).

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I5324fa28d5828a989b003bb5f715cfcac2077262
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/21734
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Jim Harris <jim.harris@samsung.com>
Reviewed-by: Aleksey Marchuk <alexeymar@nvidia.com>

show more ...