crypto: add support for PBKDF2 algorithm
The LUKS data format includes use of PBKDF2 (Password-Based Key Derivation Function). The Nettle library can provide an implementation of this, but we don't want code directly depending on a specific crypto library backend. Introduce a new include/crypto/pbkdf.h header which defines a QEMU API for invoking PBKDK2. The initial implementations are backed by nettle & gcrypt, which are commonly available with distros shipping GNUTLS. The test suite data is taken from the cryptsetup codebase under the LGPLv2.1+ license. This merely aims to verify that whatever backend we provide for this function in QEMU will comply with the spec. Reviewed-by: NFam Zheng <famz@redhat.com> Reviewed-by: NEric Blake <eblake@redhat.com> Signed-off-by: NDaniel P. Berrange <berrange@redhat.com>
Showing
crypto/pbkdf-gcrypt.c
0 → 100644
crypto/pbkdf-nettle.c
0 → 100644
crypto/pbkdf-stub.c
0 → 100644
crypto/pbkdf.c
0 → 100644
include/crypto/pbkdf.h
0 → 100644
tests/test-crypto-pbkdf.c
0 → 100644
想要评论请 注册 或 登录