geom/eli/g_eli_ctl.c

56 	struct g_eli_metadata md;
100 	error = g_eli_read_metadata(mp, pp, &md);
106 	if (md.md_keys == 0x00) {
107 		bzero(&md, sizeof(md));
114 		bzero(&md, sizeof(md));
119 	error = g_eli_mkey_decrypt(&md, key, mkey, &nkey);
122 		bzero(&md, sizeof(md));
126 		bzero(&md, sizeof(md));
134 		bzero(&md, sizeof(md));
139 		md.md_flags |= G_ELI_FLAG_WO_DETACH;
141 		md.md_flags |= G_ELI_FLAG_RO;
142 	g_eli_create(req, mp, pp, &md, mkey, nkey);
144 	bzero(&md, sizeof(md));
234 	struct g_eli_metadata md;
242 	bzero(&md, sizeof(md));
254 	strlcpy(md.md_magic, G_ELI_MAGIC, sizeof(md.md_magic));
255 	md.md_version = G_ELI_VERSION;
256 	md.md_flags |= G_ELI_FLAG_ONETIME;
260 		md.md_flags |= G_ELI_FLAG_WO_DETACH;
263 		md.md_flags |= G_ELI_FLAG_NODELETE;
265 	md.md_ealgo = CRYPTO_ALGORITHM_MIN - 1;
272 		md.md_aalgo = g_eli_str2aalgo(name);
273 		if (md.md_aalgo >= CRYPTO_ALGORITHM_MIN &&
274 		    md.md_aalgo <= CRYPTO_ALGORITHM_MAX) {
275 			md.md_flags |= G_ELI_FLAG_AUTH;
281 			md.md_ealgo = g_eli_str2ealgo(name);
282 			if (md.md_ealgo < CRYPTO_ALGORITHM_MIN ||
283 			    md.md_ealgo > CRYPTO_ALGORITHM_MAX) {
295 	if (md.md_ealgo < CRYPTO_ALGORITHM_MIN ||
296 	    md.md_ealgo > CRYPTO_ALGORITHM_MAX) {
302 		md.md_ealgo = g_eli_str2ealgo(name);
303 		if (md.md_ealgo < CRYPTO_ALGORITHM_MIN ||
304 		    md.md_ealgo > CRYPTO_ALGORITHM_MAX) {
315 	md.md_keylen = g_eli_keylen(md.md_ealgo, *keylen);
316 	if (md.md_keylen == 0) {
322 	md.md_provsize = 0;
324 	bzero(md.md_salt, sizeof(md.md_salt));
326 	md.md_keys = 0x01;
330 	bzero(md.md_hash, sizeof(md.md_hash));
351 		md.md_sectorsize = pp->sectorsize;
361 		md.md_sectorsize = *sectorsize;
364 	g_eli_create(req, mp, pp, &md, mkey, -1);
366 	bzero(&md, sizeof(md));
373 	struct g_eli_metadata md;
499 			 * we're bit-flipping uninitialized memory in md
505 			error = g_eli_read_metadata(mp, pp, &md);
515 			md.md_flags |= G_ELI_FLAG_BOOT;
518 			md.md_flags &= ~G_ELI_FLAG_BOOT;
523 			md.md_flags |= G_ELI_FLAG_NODELETE;
526 			md.md_flags &= ~G_ELI_FLAG_NODELETE;
531 			md.md_flags |= G_ELI_FLAG_GELIBOOT;
534 			md.md_flags &= ~G_ELI_FLAG_GELIBOOT;
544 		eli_metadata_encode(&md, sector);
552 		bzero(&md, sizeof(md));
562 	struct g_eli_metadata md;
589 	error = g_eli_read_metadata(mp, pp, &md);
617 		if (bitcount32(md.md_keys) != 1) {
622 		if (md.md_keys != (1 << nkey)) {
627 		md.md_iterations = *valp;
632 		bzero(&md, sizeof(md));
637 	mkeydst = md.md_mkeys + nkey * G_ELI_MKEYLEN;
638 	md.md_keys |= (1 << nkey);
643 	error = g_eli_mkey_encrypt(md.md_ealgo, key, md.md_keylen, mkeydst);
646 		bzero(&md, sizeof(md));
653 	eli_metadata_encode(&md, sector);
654 	bzero(&md, sizeof(md));
671 	struct g_eli_metadata md;
702 	error = g_eli_read_metadata(mp, pp, &md);
716 		mkeydst = md.md_mkeys;
717 		keysize = sizeof(md.md_mkeys);
738 		if (!(md.md_keys & (1 << nkey)) && !*force) {
742 		md.md_keys &= ~(1 << nkey);
743 		if (md.md_keys == 0 && !*force) {
748 		mkeydst = md.md_mkeys + nkey * G_ELI_MKEYLEN;
759 		eli_metadata_encode(&md, sector);
772 	bzero(&md, sizeof(md));
892 	struct g_eli_metadata md;
925 	error = g_eli_read_metadata(mp, pp, &md);
931 	if (md.md_keys == 0x00) {
932 		bzero(&md, sizeof(md));
939 		bzero(&md, sizeof(md));
944 	error = g_eli_mkey_decrypt(&md, key, mkey, &nkey);
947 		bzero(&md, sizeof(md));
951 		bzero(&md, sizeof(md));
970 	bzero(&md, sizeof(md));