Ilya Dryomov 8356b4b110 libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing ...

The existing approach where ceph_x_challenge_blob is encrypted with the
client's secret key and then the digest derived from the ciphertext is
used for the test doesn't work with CEPH_CRYPTO_AES256KRB5 because the
confounder randomizes the ciphertext: the client and the server get two
different ciphertexts and therefore two different digests.

msgr1 signatures are affected the same way: a digest derived from the
ciphertext for the message's "sigblock" is what becomes a signature and
the two sides disagree on the expected value.

For CEPH_CRYPTO_AES256KRB5 (and potential future encryption schemes),
switch to HMAC-SHA256 function keyed in the same way as the existing
encryption.  For CEPH_CRYPTO_AES, everything is preserved as is.

Signed-off-by: Ilya Dryomov <idryomov@gmail.com>

2026-02-09 12:29:22 +01:00

..

crush

libceph: fix crush_choose_firstn() kernel-doc warnings

2024-07-11 16:33:07 +02:00

armor.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

auth_none.c

libceph: kill ceph_none_authorizer::reply_buf

2021-06-28 23:49:25 +02:00

auth_none.h

libceph: kill ceph_none_authorizer::reply_buf

2021-06-28 23:49:25 +02:00

auth_x_protocol.h

libceph: add support for CEPH_CRYPTO_AES256KRB5

2026-02-09 12:29:22 +01:00

auth_x.c

libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing

2026-02-09 12:29:22 +01:00

auth_x.h

ceph: fix whitespace

2018-08-02 21:33:21 +02:00

auth.c

libceph: remove unnecessary ret variable in ceph_auth_init()

2021-06-28 23:49:25 +02:00

buffer.c

mm: allow !GFP_KERNEL allocations for kvmalloc

2022-01-15 16:30:29 +02:00

ceph_common.c

libceph: drop started parameter of __ceph_open_session()

2025-11-26 23:29:11 +01:00

ceph_hash.c

treewide: Use fallthrough pseudo-keyword

2020-08-23 17:36:59 -05:00

ceph_strings.c

libceph: introduce connection modes and ms_mode option

2020-12-14 23:21:50 +01:00

cls_lock_client.c

libceph: fix doc warnings in cls_lock_client.c

2021-06-28 23:49:25 +02:00

crypto.c

libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing

2026-02-09 12:29:22 +01:00

crypto.h

libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing

2026-02-09 12:29:22 +01:00

debugfs.c

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-11-26 23:29:10 +01:00

decode.c

libceph: allow addrvecs with a single NONE/blank address

2021-05-04 16:06:15 +02:00

Kconfig

libceph: add support for CEPH_CRYPTO_AES256KRB5

2026-02-09 12:29:22 +01:00

Makefile

libceph, ceph: implement msgr2.1 protocol (crc and secure modes)

2020-12-14 23:21:50 +01:00

messenger_v1.c

libceph: add empty check to ceph_con_get_out_msg()

2025-10-08 23:30:47 +02:00

messenger_v2.c

libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing

2026-02-09 12:29:22 +01:00

messenger.c

net: Convert proto_ops connect() callbacks to use sockaddr_unsized

2025-11-04 19:10:32 -08:00

mon_client.c

libceph: return the handler error from mon_handle_auth_done()

2026-01-05 22:46:43 +01:00

msgpool.c

libceph: preallocate message data items

2018-10-22 10:28:22 +02:00

osd_client.c

libceph: make calc_target() set t->paused, not just clear it

2026-01-06 00:39:43 +01:00

osdmap.c

libceph: make free_choose_arg_map() resilient to partial allocation

2026-01-05 13:28:26 +01:00

pagelist.c

libceph: Remove unused ceph_pagelist functions

2024-11-18 17:34:35 +01:00

pagevec.c

libceph: Remove unused pagevec functions

2024-11-18 17:34:35 +01:00

snapshot.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 268

2019-06-05 17:30:29 +02:00

string_table.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

striper.c

rbd: support for object-map and fast-diff

2019-07-08 14:01:45 +02:00