| Message ID | 20201016160201.7290-1-tuong.t.lien@dektech.com.au |
|---|---|
| Headers | show |
| Series | tipc: add new options for TIPC encryption | expand |
On 10/16/20 10:01 AM, Tuong Lien wrote: > This series adds two new options in the 'iproute2/tipc' command, enabling users > to use the new TIPC encryption features, i.e. the master key and rekeying which > have been recently merged in kernel. > > The help menu of the "tipc node set key" command is also updated accordingly: > > # tipc node set key --help > Usage: tipc node set key KEY [algname ALGNAME] [PROPERTIES] > tipc node set key rekeying REKEYING > > KEY > Symmetric KEY & SALT as a composite ASCII or hex string (0x...) in form: > [KEY: 16, 24 or 32 octets][SALT: 4 octets] > > ALGNAME > Cipher algorithm [default: "gcm(aes)"] > > PROPERTIES > master - Set KEY as a cluster master key > <empty> - Set KEY as a cluster key > nodeid NODEID - Set KEY as a per-node key for own or peer > > REKEYING > INTERVAL - Set rekeying interval (in minutes) [0: disable] > now - Trigger one (first) rekeying immediately > > EXAMPLES > tipc node set key this_is_a_master_key master > tipc node set key 0x746869735F69735F615F6B657931365F73616C74 > tipc node set key this_is_a_key16_salt algname "gcm(aes)" nodeid 1001002 > tipc node set key rekeying 600 > > Tuong Lien (2): > tipc: add option to set master key for encryption > tipc: add option to set rekeying for encryption > > tipc/cmdl.c | 2 +- > tipc/cmdl.h | 1 + > tipc/node.c | 81 +++++++++++++++++++++++++++++++++++++++-------------- > 3 files changed, 62 insertions(+), 22 deletions(-) > applied to iproute2-next
This series adds two new options in the 'iproute2/tipc' command, enabling users to use the new TIPC encryption features, i.e. the master key and rekeying which have been recently merged in kernel. The help menu of the "tipc node set key" command is also updated accordingly: # tipc node set key --help Usage: tipc node set key KEY [algname ALGNAME] [PROPERTIES] tipc node set key rekeying REKEYING KEY Symmetric KEY & SALT as a composite ASCII or hex string (0x...) in form: [KEY: 16, 24 or 32 octets][SALT: 4 octets] ALGNAME Cipher algorithm [default: "gcm(aes)"] PROPERTIES master - Set KEY as a cluster master key <empty> - Set KEY as a cluster key nodeid NODEID - Set KEY as a per-node key for own or peer REKEYING INTERVAL - Set rekeying interval (in minutes) [0: disable] now - Trigger one (first) rekeying immediately EXAMPLES tipc node set key this_is_a_master_key master tipc node set key 0x746869735F69735F615F6B657931365F73616C74 tipc node set key this_is_a_key16_salt algname "gcm(aes)" nodeid 1001002 tipc node set key rekeying 600 Tuong Lien (2): tipc: add option to set master key for encryption tipc: add option to set rekeying for encryption tipc/cmdl.c | 2 +- tipc/cmdl.h | 1 + tipc/node.c | 81 +++++++++++++++++++++++++++++++++++++++-------------- 3 files changed, 62 insertions(+), 22 deletions(-)