keyring: add spdk_key_dup()

It's often useful to increase the refcnt of a key, e.g. to transfer its
ownership. It could be achieved by doing
spdk_keyring_get(spdk_key_get_name(key)), but spdk_key_d

keyring: add spdk_key_dup()

It's often useful to increase the refcnt of a key, e.g. to transfer its
ownership. It could be achieved by doing
spdk_keyring_get(spdk_key_get_name(key)), but spdk_key_dup(key) is less
cumbersome.

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I805e0fe8a7ef154d19fe62621d5e736585620715
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/22653
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Jim Harris <jim.harris@samsung.com>
Reviewed-by: Ben Walker <ben@nvidia.com>
Community-CI: Mellanox Build Bot

show more ...

keyring: support for writing config

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I326512277231f57957a6d6992d62edf692650905
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/sp

keyring: support for writing config

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I326512277231f57957a6d6992d62edf692650905
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/21740
Reviewed-by: Jim Harris <jim.harris@samsung.com>
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Aleksey Marchuk <alexeymar@nvidia.com>

show more ...

keyring: add RPC for listing available keys

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I4f9f6753fa616bc1c61abb43656f95c91abf3120
Reviewed-on: https://review.spdk.io/gerrit/c

keyring: add RPC for listing available keys

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I4f9f6753fa616bc1c61abb43656f95c91abf3120
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/21739
Reviewed-by: Jim Harris <jim.harris@samsung.com>
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Aleksey Marchuk <alexeymar@nvidia.com>

show more ...

lib: add keyring library

The purpose of this library is to provide other libraries with an
interface for retrieving cryptographic keys. This interface consists of
functions managing the keyring (ad

lib: add keyring library

The purpose of this library is to provide other libraries with an
interface for retrieving cryptographic keys. This interface consists of
functions managing the keyring (add/remove), keeping track of key
references (get/put), and a set of callbacks used to define modules
responsible for providing access to the keys in a secure manner.

Key objects (called spdk_key) are identified by a unique name. They
don't hold the keying material themselves, but only act as references to
the actual key. Once the key is needed to perform a crypto operation,
this reference is used to retrieve keying material. These objects are
refcounted, so it is safe to remove a key from the keyring while it's
still in use. If that happens, the spdk_key object remains valid, but
it cannot be used to obtain the key (i.e. spdk_key_get_key() will result
in -ENOKEY).

Signed-off-by: Konrad Sztyber <konrad.sztyber@intel.com>
Change-Id: I5324fa28d5828a989b003bb5f715cfcac2077262
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/21734
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Jim Harris <jim.harris@samsung.com>
Reviewed-by: Aleksey Marchuk <alexeymar@nvidia.com>

show more ...