[PATCHv9 00/11] nvme: In-band authentication support

Sagi Grimberg sagi at grimberg.me
Thu Mar 24 10:06:52 PDT 2022


> Hi all,
> 
> recent updates to the NVMe spec have added definitions for in-band
> authentication, and seeing that it provides some real benefit
> especially for NVMe-TCP here's an attempt to implement it.
> 
> Thanks to Nicolai Stange the crypto DH framework has been upgraded
> to provide us with a FFDHE implementation; I've updated the patchset
> to use the ephemeral key generation provided there.
> 
> Note that this is just for in-band authentication. Secure
> concatenation (ie starting TLS with the negotiated parameters)
> requires a TLS handshake, which the in-kernel TLS implementation
> does not provide. This is being worked on with a different patchset,
> and subject to discussion at LSF..
> 
> The nvme-cli support has already been merged; please use the latest
> nvme-cli git repository to build the most recent version.
> 
> A copy of this patchset can be found at
> git://git.kernel.org/pub/scm/linux/kernel/git/hare/scsi-devel
> branch auth.v9
> 
> As usual, comments and reviews are welcome.

Hannes, can you resend blktests patch set as well?

IIRC one test there acted funky...



More information about the Linux-nvme mailing list