| Message ID | 20200918011729.30146-1-tuong.t.lien@dektech.com.au |
|---|---|
| Headers | show |
| Series | tipc: add more features to TIPC encryption | expand |
From: Tuong Lien <tuong.t.lien@dektech.com.au> Date: Fri, 18 Sep 2020 08:17:25 +0700 > This series adds some new features to TIPC encryption: > > - Patch 1 ("tipc: optimize key switching time and logic") optimizes the > code and logic in preparation for the following commits. > > - Patch 2 ("tipc: introduce encryption master key") introduces support > of 'master key' for authentication of new nodes and key exchange. A > master key can be set/changed by user via netlink (eg. using the same > 'tipc node set key' command in iproute2/tipc). > > - Patch 3 ("tipc: add automatic session key exchange") allows a session > key to be securely exchanged between nodes as needed. > > - Patch 4 ("tipc: add automatic rekeying for encryption key") adds > automatic 'rekeying' of session keys a specific interval. The new key > will be distributed automatically to peer nodes, so become active then. > The rekeying interval is configurable via netlink as well. > > v2: update the "tipc: add automatic session key exchange" patch to fix > "implicit declaration" issue when built without "CONFIG_TIPC_CRYPTO". > > v3: update the patches according to David comments by using the > "genl_info->extack" for messages in response to netlink user config > requests. Series applied, thanks.
This series adds some new features to TIPC encryption: - Patch 1 ("tipc: optimize key switching time and logic") optimizes the code and logic in preparation for the following commits. - Patch 2 ("tipc: introduce encryption master key") introduces support of 'master key' for authentication of new nodes and key exchange. A master key can be set/changed by user via netlink (eg. using the same 'tipc node set key' command in iproute2/tipc). - Patch 3 ("tipc: add automatic session key exchange") allows a session key to be securely exchanged between nodes as needed. - Patch 4 ("tipc: add automatic rekeying for encryption key") adds automatic 'rekeying' of session keys a specific interval. The new key will be distributed automatically to peer nodes, so become active then. The rekeying interval is configurable via netlink as well. v2: update the "tipc: add automatic session key exchange" patch to fix "implicit declaration" issue when built without "CONFIG_TIPC_CRYPTO". v3: update the patches according to David comments by using the "genl_info->extack" for messages in response to netlink user config requests. Tuong Lien (4): tipc: optimize key switching time and logic tipc: introduce encryption master key tipc: add automatic session key exchange tipc: add automatic rekeying for encryption key include/uapi/linux/tipc.h | 2 + include/uapi/linux/tipc_netlink.h | 2 + net/tipc/crypto.c | 981 ++++++++++++++++++++++-------- net/tipc/crypto.h | 43 +- net/tipc/link.c | 5 + net/tipc/msg.h | 8 +- net/tipc/netlink.c | 2 + net/tipc/node.c | 94 ++- net/tipc/node.h | 2 + net/tipc/sysctl.c | 9 + 10 files changed, 859 insertions(+), 289 deletions(-)