From: Ilya Dryomov <idryomov@gmail.com>
To: ceph-devel@vger.kernel.org
Subject: [PATCH 00/15] wip-crypto
Date: Mon, 12 Dec 2016 21:48:45 +0100 [thread overview]
Message-ID: <1481575740-1834-1-git-send-email-idryomov@gmail.com> (raw)
Hello,
This branch started as a rewrite of ceph_*{en,de}crypt*() functions to
cope with the new CONFIG_VMAP_STACK config option, but later expanded
to include fixes for two other issues:
- in-place en/decryption (patches 1-9)
- useless cipher context creation on every request (patches 10-11)
- authorize reply verification (patches 13-14)
Thanks,
Ilya
Ilya Dryomov (15):
libceph: ceph_x_encrypt_buflen() takes in_len
libceph: old_key in process_one_ticket() is redundant
libceph: introduce ceph_x_encrypt_offset()
libceph: introduce ceph_crypt() for in-place en/decryption
libceph: rename and align ceph_x_authorizer::reply_buf
libceph: tweak calcu_signature() a little
libceph: switch ceph_x_encrypt() to ceph_crypt()
libceph: switch ceph_x_decrypt() to ceph_crypt()
libceph: remove now unused ceph_*{en,de}crypt*() functions
libceph: uninline ceph_crypto_key_destroy()
libceph: stop allocating a new cipher on every crypto request
libceph: no need for GFP_NOFS in ceph_monc_init()
libceph: verify authorize reply on connect
libceph: drop len argument of *verify_authorizer_reply()
libceph: no need to drop con->mutex for ->get_authorizer()
fs/ceph/mds_client.c | 4 +-
include/linux/ceph/auth.h | 5 +-
include/linux/ceph/messenger.h | 2 +-
net/ceph/auth.c | 4 +-
net/ceph/auth_x.c | 197 +++++++++---------
net/ceph/auth_x.h | 3 +-
net/ceph/crypto.c | 461 ++++++++++-------------------------------
net/ceph/crypto.h | 26 +--
net/ceph/messenger.c | 19 +-
net/ceph/mon_client.c | 12 +-
net/ceph/osd_client.c | 4 +-
11 files changed, 246 insertions(+), 491 deletions(-)
--
2.4.3
next reply other threads:[~2016-12-12 20:50 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-12-12 20:48 Ilya Dryomov [this message]
2016-12-12 20:48 ` [PATCH 01/15] libceph: ceph_x_encrypt_buflen() takes in_len Ilya Dryomov
2016-12-12 20:48 ` [PATCH 02/15] libceph: old_key in process_one_ticket() is redundant Ilya Dryomov
2016-12-12 20:48 ` [PATCH 03/15] libceph: introduce ceph_x_encrypt_offset() Ilya Dryomov
2016-12-12 20:48 ` [PATCH 04/15] libceph: introduce ceph_crypt() for in-place en/decryption Ilya Dryomov
2016-12-12 21:11 ` Sage Weil
2016-12-12 21:15 ` Ilya Dryomov
2016-12-12 20:48 ` [PATCH 05/15] libceph: rename and align ceph_x_authorizer::reply_buf Ilya Dryomov
2016-12-12 20:48 ` [PATCH 06/15] libceph: tweak calcu_signature() a little Ilya Dryomov
2016-12-12 20:48 ` [PATCH 07/15] libceph: switch ceph_x_encrypt() to ceph_crypt() Ilya Dryomov
2016-12-12 20:48 ` [PATCH 08/15] libceph: switch ceph_x_decrypt() " Ilya Dryomov
2016-12-12 20:48 ` [PATCH 09/15] libceph: remove now unused ceph_*{en,de}crypt*() functions Ilya Dryomov
2016-12-12 20:48 ` [PATCH 10/15] libceph: uninline ceph_crypto_key_destroy() Ilya Dryomov
2016-12-12 20:48 ` [PATCH 11/15] libceph: stop allocating a new cipher on every crypto request Ilya Dryomov
2016-12-12 20:48 ` [PATCH 12/15] libceph: no need for GFP_NOFS in ceph_monc_init() Ilya Dryomov
2016-12-12 20:48 ` [PATCH 13/15] libceph: verify authorize reply on connect Ilya Dryomov
2016-12-12 20:48 ` [PATCH 14/15] libceph: drop len argument of *verify_authorizer_reply() Ilya Dryomov
2016-12-12 20:49 ` [PATCH 15/15] libceph: no need to drop con->mutex for ->get_authorizer() Ilya Dryomov
2016-12-12 22:04 ` [PATCH 00/15] wip-crypto Sage Weil
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1481575740-1834-1-git-send-email-idryomov@gmail.com \
--to=idryomov@gmail.com \
--cc=ceph-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.